CVE-2025-1269 Open Redirect in HAVELSAN's Open Source Project Liman MYS
Attackers can redirect users to malicious sites via open redirect in Liman MYS, potentially facilitating phishing or credential theft.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-1269?
CVE-2025-1269 is a medium-severity vulnerability in HAVELSAN Liman MYS, published on 18 Feb 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in HAVELSAN Liman MYS allows Cross-Site Flashing.
This issue affects Liman MYS: before 2.1.1 - 1010.
Weakness: CWE-601
Which versions are affected by CVE-2025-1269?
How do I fix CVE-2025-1269?
No fix has been published for CVE-2025-1269 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-1269 being exploited?
There is no known exploitation of CVE-2025-1269 in the wild and no public exploit code.
Sources
Also known as GHSA-jhqw-cq3q-2p2g.