CVE-2025-15241
Open Redirect in CloudPanel HTTP Header Handler (/admin/users
Publication date: 2025-12-30
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cloudpanel | community_edition | 2.5.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-601 | The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an open redirect issue in CloudPanel Community Edition up to version 2.5.1. It occurs due to manipulation of the Referer argument in the /admin/users file of the HTTP Header Handler component. An attacker can exploit this remotely to redirect users to malicious sites.
How can this vulnerability impact me? :
The vulnerability can be exploited remotely to perform open redirect attacks, potentially leading users to malicious websites. This can result in phishing attacks, loss of user trust, and indirect compromise of user security.
What immediate steps should I take to mitigate this vulnerability?
Upgrade CloudPanel Community Edition to version 2.5.2 or later, as this version fixes the open redirect vulnerability. Upgrading the affected component is recommended to mitigate the issue.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by sending crafted HTTP GET requests to the /admin/users endpoint with a manipulated Referer header containing an external URL. If the server responds with a 302 redirect to the URL specified in the Referer header, the system is vulnerable. For example, you can use curl to test this: curl -I -H "Referer: http://malicious.example.com" https://your-cloudpanel-domain/admin/users and check if the response includes a 302 redirect to the malicious URL. [3]