ByteOS Network

NVD Vulnerability Details :

CVE-2025-7953

Analyzed

Source-cna@vuldb.com

Published At-22 Jul, 2025 | 04:15

Updated At-20 Aug, 2025 | 20:19

A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS up to 5.202506.a. This issue affects some unknown processing of the file publiccms-parent/publiccms/src/main/webapp/resource/plugins/pdfjs/viewer.html. The manipulation of the argument File leads to open redirect. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named f1af17af004ca9345c6fe4d5936d87d008d26e75. It is recommended to apply a patch to fix this issue.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	5.1	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary	3.1	3.5	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Primary	3.1	6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Secondary	2.0	4.0	MEDIUM	AV:N/AC:L/Au:S/C:N/I:P/A:N

CPE Matches

publiccms>>publiccms>>Versions before 5.202506.b(exclusive)

cpe:2.3:a:publiccms:publiccms:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-601	Primary	cna@vuldb.com

References

Hyperlink	Source	Resource
https://github.com/sanluan/PublicCMS/commit/f1af17af004ca9345c6fe4d5936d87d008d26e75	cna@vuldb.com	Patch
https://github.com/sanluan/PublicCMS/issues/88	cna@vuldb.com	Exploit Issue Tracking
https://vuldb.com/?ctiid.317099	cna@vuldb.com	Permissions Required VDB Entry
https://vuldb.com/?id.317099	cna@vuldb.com	Third Party Advisory VDB Entry
https://vuldb.com/?submit.619279	cna@vuldb.com	Third Party Advisory VDB Entry

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History