Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SPIP before 4.4.5 and 4.3.9 allows an Open Redirect via the login form when used in AJAX mode. An attacker can craft a malicious URL that, when visited by a victim, redirects them to an arbitrary external site after login. This vulnerability only affects sites where the login page has been overridden to function in AJAX mode. It is not mitigated by the SPIP security screen.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-71244 Open Redirect Vulnerability in SPIP Before 4.4.5 and 4.3.9 via AJAX Login https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-71244
Post summary
The text presents an open‑redirect flaw (CVE‑2025‑71244) affecting older SPIP releases via AJAX login, without indicating exploitation, patches, or PoC details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | spip | spip | - | - | - |