cvelistv5 - cve-2025-55706

CVE-2025-55706 (GCVE-0-2025-55706)

Vulnerability from cvelistv5 – Published: 2025-08-20 04:23 – Updated: 2025-08-20 15:57

Summary

URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL.

Severity ?

4.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

5.1 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CWE

CWE-601 - URL redirection to untrusted site ('Open Redirect')

Assigner

jpcert

References

URL

Tags

	https://movabletype.org/news/2025/08/mt-843-relea…
	https://jvn.jp/en/jp/JVN76729865/

Impacted products

Vendor

Product

Version

Six Apart Ltd.

Movable Type (Software Edition)

Affected: 8.0.0 to 8.0.6
Affected: 8.4.0 to 8.4.2 (8 series)

Six Apart Ltd.	Movable Type (Software Edition)	Affected: 7 r.5508 and earlier (7 series)
Six Apart Ltd.	Movable Type Advanced (Software Edition)	Affected: 8.0.0 to 8.0.6 Affected: 8.4.0 to 8.4.2 (8 series)
Six Apart Ltd.	Movable Type Advanced (Software Edition)	Affected: 7 r.5508 and earlier (7 series)
Six Apart Ltd.	Movable Type Premium (Software Edition)	Affected: 2.09 and earlier (2 series)
Six Apart Ltd.	Movable Type Premium (Software Edition)	Affected: 1.66 and earlier (1 series)
Six Apart Ltd.	Movable Type Premium (Advanced Edition) (Software Edition)	Affected: 2.09 and earlier (2 series)
Six Apart Ltd.	Movable Type Premium (Advanced Edition) (Software Edition)	Affected: 1.66 and earlier (1 series)
Six Apart Ltd.	Movable Type (Cloud Edition)	Affected: 8.6.0 (8 series)
Six Apart Ltd.	Movable Type (Cloud Edition)	Affected: 7 r.5508 (7 series)
Six Apart Ltd.	Movable Type Premium (Cloud Edition)	Affected: 2.09 (2 series)
Six Apart Ltd.	Movable Type Premium (Cloud Edition)	Affected: 1.66 (1 series)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-55706",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-20T15:57:20.123486Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-20T15:57:41.631Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Movable Type (Software Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.0 to 8.0.6"
            },
            {
              "status": "affected",
              "version": "8.4.0 to 8.4.2 (8 series)"
            }
          ]
        },
        {
          "product": "Movable Type (Software Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "7 r.5508 and earlier (7 series)"
            }
          ]
        },
        {
          "product": "Movable Type Advanced (Software Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "8.0.0 to 8.0.6"
            },
            {
              "status": "affected",
              "version": "8.4.0 to 8.4.2 (8 series)"
            }
          ]
        },
        {
          "product": "Movable Type Advanced (Software Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "7 r.5508 and earlier (7 series)"
            }
          ]
        },
        {
          "product": "Movable Type Premium (Software Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "2.09 and earlier (2 series)"
            }
          ]
        },
        {
          "product": "Movable Type Premium (Software Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "1.66 and earlier (1 series)"
            }
          ]
        },
        {
          "product": "Movable Type Premium (Advanced Edition) (Software Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "2.09 and earlier (2 series)"
            }
          ]
        },
        {
          "product": "Movable Type Premium (Advanced Edition) (Software Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "1.66 and earlier (1 series)"
            }
          ]
        },
        {
          "product": "Movable Type (Cloud Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "8.6.0 (8 series)"
            }
          ]
        },
        {
          "product": "Movable Type (Cloud Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "7 r.5508 (7 series)"
            }
          ]
        },
        {
          "product": "Movable Type Premium  (Cloud Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "2.09 (2 series)"
            }
          ]
        },
        {
          "product": "Movable Type Premium  (Cloud Edition)",
          "vendor": "Six Apart Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "1.66 (1 series)"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "URL redirection to untrusted site (\u0027Open Redirect\u0027)  issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en-US",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "URL redirection to untrusted site (\u0027Open Redirect\u0027)",
              "lang": "en-US",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-20T04:23:01.512Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "url": "https://movabletype.org/news/2025/08/mt-843-released.html"
        },
        {
          "url": "https://jvn.jp/en/jp/JVN76729865/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2025-55706",
    "datePublished": "2025-08-20T04:23:01.512Z",
    "dateReserved": "2025-08-14T05:29:33.614Z",
    "dateUpdated": "2025-08-20T15:57:41.631Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-55706\",\"sourceIdentifier\":\"vultures@jpcert.or.jp\",\"published\":\"2025-08-20T05:15:28.253\",\"lastModified\":\"2025-08-20T14:39:07.860\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"URL redirection to untrusted site (\u0027Open Redirect\u0027)  issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL.\"},{\"lang\":\"es\",\"value\":\"Existe un problema de redirecci\u00f3n de URL a un sitio no confiable (\u0027Open Redirect\u0027) en Movable Type. Si se explota esta vulnerabilidad, se podr\u00eda insertar un par\u00e1metro no v\u00e1lido en la p\u00e1gina de restablecimiento de contrase\u00f1a, lo que podr\u00eda provocar una redirecci\u00f3n a una URL arbitraria.\"}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"vultures@jpcert.or.jp\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":5.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"ACTIVE\",\"vulnConfidentialityImpact\":\"NONE\",\"vulnIntegrityImpact\":\"LOW\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV30\":[{\"source\":\"vultures@jpcert.or.jp\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N\",\"baseScore\":4.3,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":1.4}]},\"weaknesses\":[{\"source\":\"vultures@jpcert.or.jp\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-601\"}]}],\"references\":[{\"url\":\"https://jvn.jp/en/jp/JVN76729865/\",\"source\":\"vultures@jpcert.or.jp\"},{\"url\":\"https://movabletype.org/news/2025/08/mt-843-released.html\",\"source\":\"vultures@jpcert.or.jp\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-55706\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-08-20T15:57:20.123486Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-08-20T15:57:25.698Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_0\": {\"version\": \"3.0\", \"baseScore\": 4.3, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 5.1, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N\"}, \"scenarios\": [{\"lang\": \"en-US\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type (Software Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.0.0 to 8.0.6\"}, {\"status\": \"affected\", \"version\": \"8.4.0 to 8.4.2 (8 series)\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type (Software Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"7 r.5508 and earlier (7 series)\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Advanced (Software Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.0.0 to 8.0.6\"}, {\"status\": \"affected\", \"version\": \"8.4.0 to 8.4.2 (8 series)\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Advanced (Software Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"7 r.5508 and earlier (7 series)\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium (Software Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.09 and earlier (2 series)\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium (Software Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.66 and earlier (1 series)\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium (Advanced Edition) (Software Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.09 and earlier (2 series)\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium (Advanced Edition) (Software Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.66 and earlier (1 series)\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type (Cloud Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.6.0 (8 series)\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type (Cloud Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"7 r.5508 (7 series)\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium  (Cloud Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.09 (2 series)\"}]}, {\"vendor\": \"Six Apart Ltd.\", \"product\": \"Movable Type Premium  (Cloud Edition)\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.66 (1 series)\"}]}], \"references\": [{\"url\": \"https://movabletype.org/news/2025/08/mt-843-released.html\"}, {\"url\": \"https://jvn.jp/en/jp/JVN76729865/\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"URL redirection to untrusted site (\u0027Open Redirect\u0027)  issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en-US\", \"type\": \"CWE\", \"cweId\": \"CWE-601\", \"description\": \"URL redirection to untrusted site (\u0027Open Redirect\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"shortName\": \"jpcert\", \"dateUpdated\": \"2025-08-20T04:23:01.512Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-55706\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-08-20T15:57:41.631Z\", \"dateReserved\": \"2025-08-14T05:29:33.614Z\", \"assignerOrgId\": \"ede6fdc4-6654-4307-a26d-3331c018e2ce\", \"datePublished\": \"2025-08-20T04:23:01.512Z\", \"assignerShortName\": \"jpcert\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

JVNDB-2025-000061

Vulnerability from jvndb - Published: 2025-08-20 15:30 - Updated:2025-08-20 15:30

Severity ?

5.3 (Medium) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Summary

Multiple vulnerabilities in Movable Type

Details

Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below.

Use of less trusted source (CWE-348) - CVE-2025-53522
Open redirect (CWE-601) - CVE-2025-55706

Six Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. JPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.

References

Type

URL

	JVN	https://jvn.jp/en/jp/JVN76729865/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-53522
	CVE	https://www.cve.org/CVERecord?id=CVE-2025-55706
	No Mapping(CWE-Other)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

	Six Apart, Ltd.	Movable Type
	Six Apart, Ltd.	Movable Type Advanced
	Six Apart, Ltd.	Movable Type Premium
	Six Apart, Ltd.	Movable Type Premium (Advanced Edition)

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-000061.html",
  "dc:date": "2025-08-20T15:30+09:00",
  "dcterms:issued": "2025-08-20T15:30+09:00",
  "dcterms:modified": "2025-08-20T15:30+09:00",
  "description": "Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below.\r\n\u003cul\u003e\u003cli\u003eUse of less trusted source (CWE-348) - CVE-2025-53522\u003c/li\u003e\r\n\u003cli\u003eOpen redirect (CWE-601) - CVE-2025-55706\u003c/li\u003e\u003c/ul\u003e\r\nSix Apart Ltd. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.\r\nJPCERT/CC and Six Apart Ltd. coordinated under the Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2025/JVNDB-2025-000061.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:sixapart:movable_type",
      "@product": "Movable Type",
      "@vendor": "Six Apart, Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:sixapart:movable_type_advanced",
      "@product": "Movable Type Advanced",
      "@vendor": "Six Apart, Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:sixapart:movable_type_premium",
      "@product": "Movable Type Premium",
      "@vendor": "Six Apart, Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:sixapart:movable_type_premium_advanced",
      "@product": "Movable Type Premium (Advanced Edition)",
      "@vendor": "Six Apart, Ltd.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "5.3",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2025-000061",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN76729865/index.html",
      "@id": "JVN#76729865",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-53522",
      "@id": "CVE-2025-53522",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2025-55706",
      "@id": "CVE-2025-55706",
      "@source": "CVE"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Multiple vulnerabilities in Movable Type"
}

FKIE_CVE-2025-55706

Vulnerability from fkie_nvd - Published: 2025-08-20 05:15 - Updated: 2025-08-20 14:39

Severity ?

4.3 (Medium) - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Summary

References

	URL	Tags
	vultures@jpcert.or.jp	https://jvn.jp/en/jp/JVN76729865/
	vultures@jpcert.or.jp	https://movabletype.org/news/2025/08/mt-843-released.html

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "URL redirection to untrusted site (\u0027Open Redirect\u0027)  issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL."
    },
    {
      "lang": "es",
      "value": "Existe un problema de redirecci\u00f3n de URL a un sitio no confiable (\u0027Open Redirect\u0027) en Movable Type. Si se explota esta vulnerabilidad, se podr\u00eda insertar un par\u00e1metro no v\u00e1lido en la p\u00e1gina de restablecimiento de contrase\u00f1a, lo que podr\u00eda provocar una redirecci\u00f3n a una URL arbitraria."
    }
  ],
  "id": "CVE-2025-55706",
  "lastModified": "2025-08-20T14:39:07.860",
  "metrics": {
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4,
        "source": "vultures@jpcert.or.jp",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 5.1,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "ACTIVE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "LOW",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "vultures@jpcert.or.jp",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-08-20T05:15:28.253",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "url": "https://jvn.jp/en/jp/JVN76729865/"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "https://movabletype.org/news/2025/08/mt-843-released.html"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-601"
        }
      ],
      "source": "vultures@jpcert.or.jp",
      "type": "Primary"
    }
  ]
}

GHSA-39Q7-8C7V-RHJV

Vulnerability from github – Published: 2025-08-20 06:30 – Updated: 2025-08-20 06:30

Details

Severity ?

4.3 (Medium)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

5.1 (Medium)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-55706"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-601"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-08-20T05:15:28Z",
    "severity": "MODERATE"
  },
  "details": "URL redirection to untrusted site (\u0027Open Redirect\u0027)  issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL.",
  "id": "GHSA-39q7-8c7v-rhjv",
  "modified": "2025-08-20T06:30:27Z",
  "published": "2025-08-20T06:30:26Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-55706"
    },
    {
      "type": "WEB",
      "url": "https://jvn.jp/en/jp/JVN76729865"
    },
    {
      "type": "WEB",
      "url": "https://movabletype.org/news/2025/08/mt-843-released.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-55706 (GCVE-0-2025-55706)

JVNDB-2025-000061

FKIE_CVE-2025-55706

GHSA-39Q7-8C7V-RHJV

Tags

Sightings

Nomenclature