A URL redirection to an untrusted site (‘Open Redirect’) issue exists in Movable Type. If exploited, an invalid parameter may be inserted into the password reset page, leading to redirection to an arbitrary URL. This vulnerability can potentially compromise user security by redirecting them to malicious sites.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.1 | CVE-2025-55706 |
Exploitation
To exploit this vulnerability, an attacker can manipulate the password reset page by inserting an invalid parameter that redirects users to a malicious URL. This requires user interaction, as the victim must click on the link provided by the attacker.
Affected Products
- Movable Type: A content management system that allows users to create and manage websites.
Mitigation
To mitigate this vulnerability, it is recommended to validate and sanitize user inputs on the password reset page to prevent the insertion of invalid parameters. Additionally, users should be cautious of links received in emails and verify their authenticity before clicking.