{"action":"Upgrade mayan-edms to 4.10.2 or later.","affected":[{"fixed":"4.10.2","introduced":"0"}],"component":"mayan-edms","cve_ids":["CVE-2025-14692"],"ecosystem":"PyPI","epss":0.0046,"exploited":false,"fixed_versions":["4.10.2"],"ghsa_id":"GHSA-x37w-7p52-8f49","id":"tcs_01M5KGNSR4ASWHPGCBC3W08QRM","modified_at":"2026-06-10T17:02:08.741202333Z","published_at":"2025-12-15T00:15:39.563Z","references":["https://osv.dev/vulnerability/PYSEC-2025-135","https://docs.mayan-edms.com/chapters/releases/4.10.2.html","https://docs.mayan-edms.com/chapters/releases/4.10.2.html#security","https://vuldb.com/?id.336410","https://vuldb.com/?submit.711729","https://vuldb.com/?ctiid.336410","https://github.com/ionutluca888/Mayan-EDMS-OpenRedirect-POC/tree/main","https://github.com/advisories/GHSA-x37w-7p52-8f49"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"PYSEC-2025-135","url":"https://osv.dev/vulnerability/PYSEC-2025-135"}],"summary":"A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authentication/. This manipulation causes open redirect. It is possible to initiate the attac"}