Movable Type Untrusted Source and Open Redirect Vulnerabilities (CVE-2025-53522/CVE-2025-55706)

Critical Vulnerability Information Vulnerability Overview Vulnerability ID: JVN#76729865 Description: Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities. Affected Products Software Edition - Movable Type / Movable Type Advanced: 6.0.0 to 8.0.6, 8.4.0 to 8.4.2 (6 series); 7 r5508 and earlier (7 series) - Movable Type Premium / Movable Type Premium (Advanced Edition): 2.09 and earlier (2 series); 1.66 and earlier (1 series) Cloud Edition - Movable Type: 8.6.0 (8 series); 7 r5508 (7 series) - Movable Type Premium: 2.09 (2 series); 1.66 (1 series) Vulnerability Details Use of Untrusted Source (CWE-348) - CVSS 4.0: AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VEL:VA:NSC:N/SE:N/SA:A/N Base Score 6.9 - CVSS 3.0: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Base Score 5.3 - CVE-2025-53522 Open Redirect (CWE-601) - CVSS 4.0: AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VEL:VA:NSC:N/SE:N/SA:N Base Score 5.1 - CVSS 3.0: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Base Score 4.3 - CVE-2025-55706 Impact Tampered emails may be sent by remote unauthenticated attackers to reset passwords (CVE-2025-53522) Invalid parameters may be inserted into the password reset page, causing redirection to arbitrary URLs (CVE-2025-55706) Remediation Upgrade to the following versions: - Movable Type / Movable Type Advanced: 8.7.0 (Cloud Edition only) - Movable Type / Movable Type Advanced: 8.0.7, 8.4.3 (Software Edition only) - Movable Type / Movable Type Advanced: 7 r5509 - Movable Type Premium / Movable Type Premium (Advanced Edition): 2.10 - Movable Type Premium / Movable Type Premium (Advanced Edition): 1.67 Vendor Status Vendor: Six Apart Ltd. Status: Vulnerable Last Updated: 2025/08/20 Vendor Notes: Six Apart Ltd. Website

Goal Reached Thanks to every supporter — we hit 100%!

Movable Type Untrusted Source and Open Redirect Vulnerabilities (CVE-2025-53522/CVE-2025-55706)