Home

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Bunkerity Bunker Web on Linux allows Phishing.This issue affects Bunker Web: 1.6.2.

PUBLISHED Reserved 2025-07-22 | Published 2025-08-15 | Updated 2025-08-25 | Assigner Fluid Attacks




MEDIUM: 4.8CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Problem types

CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

Product status

Default status
unaffected

1.6.2 (custom) before 1.6.4
affected

References

fluidattacks.com/advisories/cypress third-party-advisory

github.com/bunkerity/bunkerweb product

github.com/bunkerity/bunkerweb/releases/tag/v1.6.4 patch

cve.org (CVE-2025-8066)

nvd.nist.gov (CVE-2025-8066)

Download JSON