CloudPanel Community Edition CVE-2025-15241
LOWSeverity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
1DescriptionCVE.org
A security vulnerability has been detected in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 2.5.2 is sufficient to fix this issue. Upgrading the affected component is recommended.
AnalysisAI
Open redirect vulnerability in CloudPanel Community Edition up to version 2.5.1 allows authenticated attackers with user interaction to redirect users to arbitrary external websites via a malicious Referer header in the /admin/users endpoint. The vulnerability carries a CVSS 2.0 score with low severity impact, EPSS exploitation probability of 0.04%, publicly available exploit code, and vendor-confirmed patch in version 2.5.2.
Technical ContextAI
The vulnerability exists in the HTTP Header Handler component of CloudPanel's /admin/users administrative interface, specifically in how it processes the Referer HTTP header (CWE-601: URL Redirection to Untrusted Site). When the application fails to properly validate or sanitize the Referer header before redirecting users, attackers can inject arbitrary URLs, enabling phishing attacks and credential theft. The affected product is CloudPanel Community Edition, an open-source server management and hosting control panel. The vulnerability requires authentication and user interaction, limiting its attack surface compared to unauthenticated open redirects.
Affected ProductsAI
CloudPanel Community Edition versions up to and including 2.5.1 are vulnerable. The affected component is the HTTP Header Handler in the /admin/users administrative interface. Patched version 2.5.2 is available and resolves the vulnerability. Organizations running CloudPanel Community Edition should check their current version against the affected range and upgrade accordingly.
RemediationAI
Upgrade CloudPanel Community Edition to version 2.5.2 or later immediately, which includes the vendor-released patch addressing the Referer header validation. No workaround is available for unpatched installations; however, risk can be mitigated by restricting administrative access to CloudPanel through network-level controls (IP whitelisting, VPN requirements) and implementing strong authentication mechanisms to limit the pool of authenticated users who could be targeted. Additionally, security awareness training for administrators regarding suspicious redirect links can reduce the likelihood of successful phishing via this vector. Refer to the official CloudPanel release at https://github.com/cloudpanel-io/cloudpanel-ce/releases/tag/v2.5.2 for patch details.
More in Open Redirect
View allA malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca
GFI Kerio Control versions 9.2.5 through 9.4.5 contain an HTTP response splitting vulnerability in the dest parameter of
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect
Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 b
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (li
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3
Flarum is open source discussion platform software. Rated medium severity (CVSS 6.5), this vulnerability is remotely exp
Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites
Open redirect vulnerability in the Redirect function in stageshow_redirect.php in the StageShow plugin before 5.0.9 for
Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link. Rated crit
Share
External POC / Exploit Code
Leaving vuln.today