Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-63828

Host Header Injection vulnerability in Backdrop CMS 1.32.1 allows attackers to manipulate the Host header in password reset requests, leading to redirects to malicious domains and potential session hijacking via cookie injection.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a047b6e6c9064c1486e9eea4fc0081e8b612028dcec5edc04340b230422a9af4
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

cwe · 2 assertions

{"cweId":"CWE-601","description":"CWE-601 URL Redirection to Untrusted Site ('Open Redirect')","lang":"en","type":"CWE"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:5d55c54e7a277c8f370a549ff32916efb2a87a91f0ceead2444211dd81c69d34 · sha256:7d33239f46479281… · /containers/adp/0/problemTypes/0/descriptions/0

{"description":"n/a","lang":"en","type":"text"}

  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:5d55c54e7a277c8f370a549ff32916efb2a87a91f0ceead2444211dd81c69d34 · sha256:7d33239f46479281… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

1 source assertion
{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:5d55c54e7a277c8f370a549ff32916efb2a87a91f0ceead2444211dd81c69d34 · sha256:7d33239f46479281… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.1,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:5d55c54e7a277c8f370a549ff32916efb2a87a91f0ceead2444211dd81c69d34 · sha256:7d33239f46479281… · /containers/adp/0/metrics/0/cvssV3_1

CWE assertions

2 source assertions
{"cweId":"CWE-601","description":"CWE-601 URL Redirection to Untrusted Site ('Open Redirect')","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:5d55c54e7a277c8f370a549ff32916efb2a87a91f0ceead2444211dd81c69d34 · sha256:7d33239f46479281… · /containers/adp/0/problemTypes/0/descriptions/0
{"description":"n/a","lang":"en","type":"text"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:5d55c54e7a277c8f370a549ff32916efb2a87a91f0ceead2444211dd81c69d34 · sha256:7d33239f46479281… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"url":"https://github.com/mertdurum06/BackdropCms-1.32.1/"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5d55c54e7a277c8f370a549ff32916efb2a87a91f0ceead2444211dd81c69d34 · sha256:7d33239f46479281… · /containers/cna/references/0
{"url":"https://github.com/mertdurum06/BackdropCms-1.32.1/blob/main/backdropcms_exploit.txt"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5d55c54e7a277c8f370a549ff32916efb2a87a91f0ceead2444211dd81c69d34 · sha256:7d33239f46479281… · /containers/cna/references/1
{"tags":["exploit"],"url":"https://github.com/mertdurum06/BackdropCms-1.32.1/blob/main/backdropcms_exploit.txt"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:5d55c54e7a277c8f370a549ff32916efb2a87a91f0ceead2444211dd81c69d34 · sha256:7d33239f46479281… · /containers/adp/0/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer