CVE-2025-15241

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-15241

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15241.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-15241

Published

2025-12-30T09:02:07.225Z

Modified

2026-07-15T01:48:54.591201479Z

Severity

2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

CloudPanel Community Edition HTTP Header users redirect

Details

A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.5.2 is sufficient to fix this issue. Upgrading the affected component is recommended.

Database specific

{
    "cwe_ids": [
        "CWE-601"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15241.json"
}

References

Affected packages

Git / github.com/cloudpanel-io/cloudpanel-ce

Affected ranges

Type

GIT

Repo

https://github.com/cloudpanel-io/cloudpanel-ce

Events

Introduced

d7834938da11d0c25c157275414118606046d22e

Fixed

4578c74711bc8874e14caa5615169e6e4cd0ceae

Database specific

{
    "extracted_events": [
        {
            "introduced": "2.5.0"
        },
        {
            "last_affected": "2.5.0"
        },
        {
            "introduced": "2.5.1"
        },
        {
            "last_affected": "2.5.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

2.*

2.5.0

2.5.1

v2.*

v2.5.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15241.json"