CVE-2021-39425

6.1 mediumEPSS 0.5%

Medium (6.1) in seeddms seeddms. EPSS 0.5% chance of exploitation in the next 30 days.

SeedDMS v6.0.15 was discovered to contain an open redirect vulnerability. An attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on crafted links.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 42% of CVEs (scores of 2026-10-31)
CWE: CWE-601
Published: 2023-07-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

seeddms:seeddms

References

https://medium.com/%40rohitgautam26/cve-2021-39425-8a336eba34dd
https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/11-Client_Side_Testing/04-Testing_for_Client_Side_URL_Redirect
https://medium.com/%40rohitgautam26/cve-2021-39425-8a336eba34dd
https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/11-Client_Side_Testing/04-Testing_for_Client_Side_URL_Redirect

Check your stack JSON