CVE-2025-14692

2 advisories.

PyPI/mayan-edms CVE-2025-14692: medium 4.3, EPSS 0.46%

Mayan EDMS has an Open Redirect through the /authentication/ file

Action: Upgrade mayan-edms to 4.6.12 or later.

pip install mayan-edms==4.10.2

pip install mayan-edms==4.9.7

pip install mayan-edms==4.8.10

pip install mayan-edms==4.7.8

pip install mayan-edms==4.6.12

Affected

introduced	fixed	last affected
4.10.0	4.10.2	-
4.9.0	4.9.7	-
4.8.0	4.8.10	-
4.7.0	4.7.8	-
0	4.6.12	-

Fixed versions

4.10.2

4.9.7

4.8.10

4.7.8

4.6.12

Sources

CVE-2025-14692 · published 2025-12-15T00:30:25Z · modified 2026-06-06T00:45:49.190901799Z · JSON

PyPI/mayan-edms CVE-2025-14692: medium 6.1, EPSS 0.46%

A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authentication/. This manipulation causes open redirect. It is possible to initiate the attac

Action: Upgrade mayan-edms to 4.10.2 or later.

pip install mayan-edms==4.10.2

Affected

introduced	fixed	last affected
0	4.10.2	-

Fixed versions

4.10.2

Sources

CVE-2025-14692 · published 2025-12-15T00:15:39.563Z · modified 2026-06-10T17:02:08.741202333Z · JSON