CVE-2025-7953 - Sanluan PublicCMS viewer.html redirect

Back Back to CVE browser

MEDIUM

Sanluan PublicCMS viewer.html redirect

Published Jul 22, 2025

5.1

MEDIUM

CVSS 4.0

EPSS 0.34%

Description

A vulnerability, which was classified as problematic, has been found in Sanluan PublicCMS up to 5.202506.a. This issue affects some unknown processing of the file publiccms-parent/publiccms/src/main/webapp/resource/plugins/pdfjs/viewer.html. The manipulation of the argument File leads to open redirect. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named f1af17af004ca9345c6fe4d5936d87d008d26e75. It is recommended to apply a patch to fix this issue.

Affected products

Vendor Sanluan Product PublicCMS Default
n/a
- Version
  5.202506.a
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Sanluan

PublicCMS

n/a

Version	Status	Constraints
5.202506.a	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-22294
Advisory
https://github.com/sanluan/PublicCMS/commit/f1af17af004ca9345c6fe4d5936d87d008d26e75
patch
https://github.com/sanluan/PublicCMS/issues/88
exploitissue-trackingIssue Tracking
https://vuldb.com/?ctiid.317099
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.317099
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.619279
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-22294		Advisory
https://github.com/sanluan/PublicCMS/commit/f1af17af004ca9345c6fe4d5936d87d008d26e75		patch
https://github.com/sanluan/PublicCMS/issues/88		exploitissue-trackingIssue Tracking
https://vuldb.com/?ctiid.317099		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.317099		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.619279		third-party-advisoryThird Party AdvisoryVDB Entry