CVE-2019-6025
First published: Thu Dec 26 2019(Updated: )
Open redirect vulnerability in Movable Type series Movable Type 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Advanced 7 r.4602 (7.1.3) and earlier (Movable Type 7), Movable Type Advanced 6.5.0 and 6.5.1 (Movable Type 6.5), Movable Type Advanced 6.3.9 and earlier (Movable Type 6.3.x, 6.2.x, 6.1.x, 6.0.x), Movable Type Premium 1.24 and earlier (Movable Type Premium), and Movable Type Premium (Advanced Edition) 1.24 and earlier (Movable Type Premium) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sixapart Movable Type | >=6.0<=6.3.9 | |
| Sixapart Movable Type | >=7.0<=7.1.3 | |
| Sixapart Movable Type | =6.5.0 | |
| Sixapart Movable Type | =6.5.1 | |
| Sixapart Movable Type | <=1.24 | |
| Sixapart Movable Type | <=1.24 | |
| Sixapart Movable Type | >=6.0<=6.3.9 | |
| Sixapart Movable Type | >=7.0<=7.1.3 | |
| Sixapart Movable Type | =6.5.0 | |
| Sixapart Movable Type | =6.5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-6025?
CVE-2019-6025 is an open redirect vulnerability in Movable Type series Movable Type 7 r.4602 (7.1.3) and earlier.
How does CVE-2019-6025 affect Sixapart Movable Type?
CVE-2019-6025 affects Sixapart Movable Type versions 6.3.x, 6.2.x, 6.1.x, 6.0.x, 7.0, and 7.1.3.
What is the severity of CVE-2019-6025?
The severity of CVE-2019-6025 is medium with a CVSS score of 6.1.
How can I fix CVE-2019-6025?
To fix CVE-2019-6025, update to Movable Type versions 6.3.9, 6.5.0, 6.5.1, 7.1.4, or later.
Where can I find more information about CVE-2019-6025?
You can find more information about CVE-2019-6025 on the JVN website and the Movable Type official website.
- collector/nvd-index
- agent/type
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sixapart
- canonical/sixapart movable type
- version/sixapart movable type/6.0
- version/sixapart movable type/6.3.9
- version/sixapart movable type/7.0
- version/sixapart movable type/7.1.3
- version/sixapart movable type/6.5.0
- version/sixapart movable type/6.5.1
- version/sixapart movable type/1.24