CVE-2025-67502mediumCWE-601

CVE-2025-67502: fallo de gravedad media en remram44 taguette

Taguette does not safeguard against Open Redirect

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear taguette+ Monitorear taguette

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.4epss 0.3%
Taguette is an open source qualitative research tool. In versions 1.5.1 and below, attackers can craft malicious URLs that redirect users to arbitrary external websites after authentication. The application accepts a user-controlled next parameter and uses it directly in HTTP redirects without any validation. This can be exploited for phishing attacks where victims believe they are interacting with a trusted Taguette instance but are redirected to a malicious site designed to steal credentials or deliver malware. This issue is fixed in version 1.5.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Productos afectados
remram44 · taguette
CVEs relacionadas — remram44 taguette

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-62527HIGHTaguette vulnerable to password reset link poisoningEPSS 0.3%CVE-2025-62528MEDIUMTaguette cross-site scripting vulnerability via tag name, tag description, document name and document descriptionEPSS 0.2%