Log in Start free

Vulnerability · Published Aug 20, 2025 · Assigned by jpcert

CVE-2025-55706

Medium 4.3

In plain English

A medium-severity open redirect in Movable Type Advanced (Software Edition) from Six Apart Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).

Severity (CVSS 3.0)4.3Medium
Exploit odds (30 days)0.2%top 89.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL.

Affected products (as reported)

VendorProductVersions
Six Apart Ltd. Movable Type (Software Edition) 8.0.0 to 8.0.68.4.0 to 8.4.2 (8 series)
Six Apart Ltd. Movable Type (Software Edition) 7 r.5508 and earlier (7 series)
Six Apart Ltd. Movable Type Advanced (Software Edition) 8.0.0 to 8.0.68.4.0 to 8.4.2 (8 series)
Six Apart Ltd. Movable Type Advanced (Software Edition) 7 r.5508 and earlier (7 series)
Six Apart Ltd. Movable Type Premium (Software Edition) 2.09 and earlier (2 series)
Six Apart Ltd. Movable Type Premium (Software Edition) 1.66 and earlier (1 series)
Six Apart Ltd. Movable Type Premium (Advanced Edition) (Software Edition) 2.09 and earlier (2 series)
Six Apart Ltd. Movable Type Premium (Advanced Edition) (Software Edition) 1.66 and earlier (1 series)
Six Apart Ltd. Movable Type (Cloud Edition) 8.6.0 (8 series)
Six Apart Ltd. Movable Type (Cloud Edition) 7 r.5508 (7 series)
Six Apart Ltd. Movable Type Premium (Cloud Edition) 2.09 (2 series)
Six Apart Ltd. Movable Type Premium (Cloud Edition) 1.66 (1 series)

Weakness: CWE-601 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

References