PyPI/mayan-edms CVE-2025-14692: medium 4.3, EPSS 0.46%
Mayan EDMS has an Open Redirect through the /authentication/ file
Action: Upgrade mayan-edms to 4.6.12 or later.
pip install mayan-edms==4.10.2pip install mayan-edms==4.9.7pip install mayan-edms==4.8.10pip install mayan-edms==4.7.8pip install mayan-edms==4.6.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.10.0 | 4.10.2 | - |
| 4.9.0 | 4.9.7 | - |
| 4.8.0 | 4.8.10 | - |
| 4.7.0 | 4.7.8 | - |
| 0 | 4.6.12 | - |
Fixed versions
| 4.10.2 | 4.9.7 | 4.8.10 | 4.7.8 | 4.6.12 |
Sources
- osv: GHSA-x37w-7p52-8f49
- https://nvd.nist.gov/vuln/detail/CVE-2025-14692
- https://docs.mayan-edms.com/chapters/releases/4.10.2.html
- https://docs.mayan-edms.com/chapters/releases/4.10.2.html#security
- https://github.com/ionutluca888/Mayan-EDMS-OpenRedirect-POC/tree/main
- https://github.com/pypa/advisory-database/tree/main/vulns/mayan-edms/PYSEC-2025-135.yaml
- https://gitlab.com/mayan-edms/mayan-edms
- https://gitlab.com/mayan-edms/mayan-edms/-/commit/45355cbb45a28f61f38f719112d0ff422e6dc688
- https://gitlab.com/mayan-edms/mayan-edms/-/commit/94032fbe553e97b33e4e9b9e731b4fc45f9d9f91
- https://gitlab.com/mayan-edms/mayan-edms/-/commit/da9de60a9b84f11d5d2c7bbf118fe696b4f6357e
- https://vuldb.com/?ctiid.336410
- https://vuldb.com/?id.336410
- https://vuldb.com/?submit.711729
CVE-2025-14692 · published · modified · JSON