PT-2025-12975 · Unknown+2 · Icinga Web 2+2

Moezbouzayani9 · Published 2025-03-26 · Updated 2025-08-21 · CVE-2025-30164

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Icinga Web 2 versions prior to 2.11.5 Icinga Web 2 versions prior to 2.12.3

Description A vulnerability in Icinga Web 2 allows an attacker to craft a URL that, once visited by an authenticated user, manipulates the backend to redirect the user to any location. This issue has been resolved in versions 2.11.5 and 2.12.3 of Icinga Web 2.

Recommendations For versions prior to 2.11.5, update to version 2.11.5 or later. For versions prior to 2.12.3, update to version 2.12.3 or later.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

ALT-PU-2025-10627

CVE-2025-30164

GHSA-8R73-6686-WV8Q

OPENSUSE-SU-2025:14931-1

Affected Products

Alt Linux

Debian

Icinga Web 2

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/30xxx/CVE-2025-30164.json · Exploit
• https://github.com/Icinga/icingaweb2/security/advisories/GHSA-8r73-6686-wv8q · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-30164 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-30164 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-30164 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-30164 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14931-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-30164 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-30164 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30164 · Security Note
• https://github.com/Icinga/icingaweb2/releases/tag/v2.12.3 · Note
• https://github.com/Icinga/icingaweb2/releases/tag/v2.11.5 · Note
• https://t.me/cvetracker/19984 · Telegram Post
• https://t.me/cvedetector/21211 · Telegram Post
• https://suse.com/security/cve/CVE-2025-27404 · Note