PyPI/mayan-edms CVE-2025-14692: medium 6.1, EPSS 0.46%
A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authentication/. This manipulation causes open redirect. It is possible to initiate the attac
Action: Upgrade mayan-edms to 4.10.2 or later.
pip install mayan-edms==4.10.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.10.2 | - |
Fixed versions
| 4.10.2 |
Sources
- osv: PYSEC-2025-135
- https://docs.mayan-edms.com/chapters/releases/4.10.2.html
- https://docs.mayan-edms.com/chapters/releases/4.10.2.html#security
- https://vuldb.com/?id.336410
- https://vuldb.com/?submit.711729
- https://vuldb.com/?ctiid.336410
- https://github.com/ionutluca888/Mayan-EDMS-OpenRedirect-POC/tree/main
- https://github.com/advisories/GHSA-x37w-7p52-8f49
CVE-2025-14692 · published · modified · JSON