From 99d1963f4a4f7560e9966fdc31452868dc92f685 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Wed, 28 May 2025 17:40:58 +0000
Subject: [PATCH] Publish GHSA-6vx9-9r2g-8373

---
 .../GHSA-6vx9-9r2g-8373.json                  | 95 +++++++++++++++++++
 1 file changed, 95 insertions(+)
 create mode 100644 advisories/github-reviewed/2025/05/GHSA-6vx9-9r2g-8373/GHSA-6vx9-9r2g-8373.json

diff --git a/advisories/github-reviewed/2025/05/GHSA-6vx9-9r2g-8373/GHSA-6vx9-9r2g-8373.json b/advisories/github-reviewed/2025/05/GHSA-6vx9-9r2g-8373/GHSA-6vx9-9r2g-8373.json
new file mode 100644
index 00000000000..6d98f81beec
--- /dev/null
+++ b/advisories/github-reviewed/2025/05/GHSA-6vx9-9r2g-8373/GHSA-6vx9-9r2g-8373.json
@@ -0,0 +1,95 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6vx9-9r2g-8373",
+  "modified": "2025-05-28T17:39:45Z",
+  "published": "2025-05-28T17:39:45Z",
+  "aliases": [
+    "CVE-2025-5256"
+  ],
+  "summary": "Mautic has an Open Redirect vulnerability on user unlock path.",
+  "details": "### Summary\nThis advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint. This vulnerability could be exploited by an attacker to redirect legitimate users to malicious websites, potentially leading to phishing attacks or the delivery of exploit kits.\n\nOpen Redirection via `returnUrl` Parameter: An Open Redirection vulnerability exists in the `/s/action/unlock/user.user/0` endpoint. The `returnUrl` parameter, intended for post-action redirection, is not properly validated. This allows an attacker to craft a URL that, when clicked by a user, redirects them to an arbitrary external website controlled by the attacker.\n\n### Mitigation\nUpdate Mautic to a version that properly validates or sanitizes the `returnUrl` parameter to ensure that redirects only occur to trusted, internal URLs or explicitly whitelisted domains.",
+  "severity": [
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:U"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "mautic/core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "1.0.0"
+            },
+            {
+              "fixed": "4.4.16"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "mautic/core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "5.0.0-alpha"
+            },
+            {
+              "fixed": "5.2.6"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Packagist",
+        "name": "mautic/core"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "6.0.0-alpha"
+            },
+            {
+              "fixed": "6.0.2"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/mautic/mautic/security/advisories/GHSA-6vx9-9r2g-8373"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/mautic/mautic"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-601"
+    ],
+    "severity": "LOW",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-05-28T17:39:45Z",
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file