{"action":"Upgrade mayan-edms to 4.6.12 or later.","affected":[{"fixed":"4.10.2","introduced":"4.10.0"},{"fixed":"4.9.7","introduced":"4.9.0"},{"fixed":"4.8.10","introduced":"4.8.0"},{"fixed":"4.7.8","introduced":"4.7.0"},{"fixed":"4.6.12","introduced":"0"}],"component":"mayan-edms","cve_ids":["CVE-2025-14692"],"ecosystem":"PyPI","epss":0.0046,"exploited":false,"fixed_versions":["4.10.2","4.9.7","4.8.10","4.7.8","4.6.12"],"ghsa_id":"GHSA-x37w-7p52-8f49","id":"tcs_01M5KG396WWR4CH2SS3J7ZDHM6","modified_at":"2026-06-06T00:45:49.190901799Z","published_at":"2025-12-15T00:30:25Z","references":["https://osv.dev/vulnerability/GHSA-x37w-7p52-8f49","https://nvd.nist.gov/vuln/detail/CVE-2025-14692","https://docs.mayan-edms.com/chapters/releases/4.10.2.html","https://docs.mayan-edms.com/chapters/releases/4.10.2.html#security","https://github.com/ionutluca888/Mayan-EDMS-OpenRedirect-POC/tree/main","https://github.com/pypa/advisory-database/tree/main/vulns/mayan-edms/PYSEC-2025-135.yaml","https://gitlab.com/mayan-edms/mayan-edms","https://gitlab.com/mayan-edms/mayan-edms/-/commit/45355cbb45a28f61f38f719112d0ff422e6dc688","https://gitlab.com/mayan-edms/mayan-edms/-/commit/94032fbe553e97b33e4e9b9e731b4fc45f9d9f91","https://gitlab.com/mayan-edms/mayan-edms/-/commit/da9de60a9b84f11d5d2c7bbf118fe696b4f6357e","https://vuldb.com/?ctiid.336410","https://vuldb.com/?id.336410","https://vuldb.com/?submit.711729"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-x37w-7p52-8f49","url":"https://osv.dev/vulnerability/GHSA-x37w-7p52-8f49"}],"summary":"Mayan EDMS has an Open Redirect through the /authentication/ file"}