CVE-2025-53522
Movable Type contains an issue with use of less trusted source. If exploited, tampered email to reset a password may be sent by a remote unauthenticated attacker.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.9
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.18%
- CWE
- CWE-348
- Published
- 2025-08-20
- Last modified
- 2026-03-13
Affected products
- Six Apart Ltd. Movable Type (Software Edition)
- Six Apart Ltd. Movable Type (Software Edition)
- Six Apart Ltd. Movable Type (Software Edition)
- Six Apart Ltd. Movable Type Advanced (Software Edition)
- Six Apart Ltd. Movable Type Advanced (Software Edition)
- Six Apart Ltd. Movable Type Advanced (Software Edition)
- Six Apart Ltd. Movable Type Premium (Software Edition)
- Six Apart Ltd. Movable Type Premium (Software Edition)
Weakness type
Related vulnerabilities
- CVE-2026-16272 — Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module
- CVE-2026-16732 — fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count
- CVE-2026-25552 — Ghost CLI < 1.30.1 IP Spoofing via X-Forwarded-For Header
- CVE-2026-63220 — CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()
- CVE-2026-50243 — 'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL
- CVE-2026-63770 — Glance 0.8.5 IP Spoofing Authentication Brute-Force Protection Bypass
- CVE-2026-64619 — FileCodeBox < 2.4 Anti-bruteforce Rate Limit Bypass via Spoofed Headers
- CVE-2026-46415 — Caddy Defender trusted proxy client IP bypass