{"id":"CVE-2025-55706","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-55706","generatedAt":"2026-10-28T03:28:06.607Z","title":"If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL.","description":"URL redirection to untrusted site ('Open Redirect')  issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL.","published":"2025-08-20T05:15:28.000Z","lastModified":"2026-06-17T09:42:06.000Z","status":"Deferred","sourceIdentifier":"vultures@jpcert.or.jp","cvss":{"version":"4.0","score":5.1,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-601"],"affected":[],"epss":{"score":0.00208,"percentile":0.10858,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://jvn.jp/en/jp/JVN76729865/","source":"vultures@jpcert.or.jp"},{"url":"https://movabletype.org/news/2025/08/mt-843-released.html","source":"vultures@jpcert.or.jp"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-55706","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}