CVE-2025-68616

Katalog CVE

CVSS 7.5 · High EPSS 0,71%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada kozea weasyprint. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery (SSRF) protection bypass exists in WeasyPrint's `default_url_fetcher`. The vulnerability allows attackers to access internal network resources (such as `localhost` services or cloud metadata endpoints) even when a developer has implemented a custom `url_fetcher` to block such access. This occurs because the underlying `urllib` library follows HTTP redirects automatically without re-validating the new destination against the developer's security policy. Version 68.0 contains a patch for the issue.

Rincian

Terbit di NVD

19 Januari 2026

Terakhir diubah

15 Juli 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,71% peluang dieksploitasi; lebih tinggi dari 52,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565 patch
• https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmv exploit · advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2025-68616
• https://bugzilla.redhat.com/show_bug.cgi?id=2430858
• https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68616.json