Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-65319 EUVD-2025-203806GHSA-gg78-3r36-662j

When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves documents to a file system without a Mark-of-the-W…

Published Dec 16, 2025 · Updated Jul 5, 2026 · Assigned by mitre

Description

When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of both Windows OS and third-party software.

References