PT-2025-53858 · Unknown · Cloudpanel Community Edition

Alexperrakis · CVE-2025-15241 · Published 2025-12-30 · Updated 2025-12-30

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CloudPanel Community Edition versions up to 2.5.1

Description A security issue exists in CloudPanel Community Edition. The problem involves an open redirect through manipulation of the Referer argument within an unknown function of the /admin/users file, related to the HTTP Header Handler component. This manipulation allows for remote attacks. The exploit has been publicly disclosed.

Recommendations Upgrade to version 2.5.2 to resolve the issue.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-15241

Affected Products

Cloudpanel Community Edition

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15241.json · Exploit
• 🔥 https://github.com/Stolichnayer/cloudpanel-open-redirect?tab=readme-ov-file#%EF%B8%8F-steps-to-reproduce · Exploit
• https://github.com/cloudpanel-io/cloudpanel-ce/releases/tag/v2.5.2 · Patch
• https://osv.dev/vulnerability/CVE-2025-15241 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-15241 · Security Note
• https://github.com/Stolichnayer/cloudpanel-open-redirect · Note
• https://twitter.com/VulmonFeeds/status/2005972251376570715 · Twitter Post
• https://t.me/cveNotify/147121 · Telegram Post
• https://vuldb.com/?submit.725543 · Note
• https://t.me/CVEtracker/40929 · Telegram Post
• https://vuldb.com/?ctiid.338631 · Note
• https://vuldb.com/?id.338631 · Note
• https://twitter.com/CVEnew/status/2005932294784139578 · Twitter Post