CVE-2025-55706: Medium severity Movable Type Movable Type vulnerability

Published Aug 20, 2025

Updated

URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL.

Affected Software

1 affected component

Movable Type Movable Type

Event History

Aug 20, 2025

CVE Published

via MITRE·04:23 AM

Data Sourced

via MITRE·04:23 AM

DescriptionSeverity

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-55706?

CVE-2025-55706 is classified as a medium severity vulnerability due to its potential for causing user redirection to untrusted sites.

How do I fix CVE-2025-55706?

To fix CVE-2025-55706, ensure you update Movable Type to the latest version where the vulnerability is patched.

What are the potential impacts of CVE-2025-55706?

Exploiting CVE-2025-55706 may allow attackers to redirect users to arbitrary, potentially malicious URLs.

Who is affected by CVE-2025-55706?

Anyone using Movable Type that has not applied the necessary updates may be vulnerable to CVE-2025-55706.

What kind of attack does CVE-2025-55706 enable?

CVE-2025-55706 enables open redirect attacks that can lead to phishing or malware distribution.