CVE-2025-7949

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-7949
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7949.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-7949
Published
2025-07-22T01:32:06Z
Modified
2026-10-28T02:31:04Z
Severity
  • 2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
Sanluan PublicCMS preview.html redirect
Details

A vulnerability was found in Sanluan PublicCMS up to 5.202506.a. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file publiccms-parent/publiccms/src/main/resources/templates/admin/cmsDiy/preview.html. The manipulation of the argument url leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named c1e79f124e3f4c458315d908ed7dee06f9f12a76/f1af17af004ca9345c6fe4d5936d87d008d26e75. It is recommended to apply a patch to fix this issue.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-601"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7949.json"
}
References

Affected packages

Git / github.com/sanluan/publiccms

Affected ranges

Type
GIT
Repo
https://github.com/sanluan/publiccms
Events
Introduced
b0407d1a010ef076ddbe27c50ad7f4bc53c40541
Fixed
c1e79f124e3f4c458315d908ed7dee06f9f12a76
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "5.202506.a"
                },
                {
                    "last_affected":  "5.202506.a"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        },
        {
            "range":  [
                {
                    "fixed":  "c1e79f124e3f4c458315d908ed7dee06f9f12a76"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

5.*
5.202506.a

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7949.json"