URL redirection to untrusted site ('Open Redirect') issue exists in Movable Type. If this vulnerability is exploited, an invalid parameter may be inserted into the password reset page, which may lead to redirection to an arbitrary URL.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Movable Type (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0.0 to 8.0.6
affected
Unavailable
Unavailable
Unavailable
None listed
8.4.0 to 8.4.2 (8 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7 r.5508 and earlier (7 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Advanced (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Advanced (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Advanced (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0.0 to 8.0.6
affected
Unavailable
Unavailable
Unavailable
None listed
8.4.0 to 8.4.2 (8 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Advanced (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Advanced (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Advanced (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7 r.5508 and earlier (7 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Premium (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Premium (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.09 and earlier (2 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Premium (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Premium (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.66 and earlier (1 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium (Advanced Edition) (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Premium (Advanced Edition) (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Premium (Advanced Edition) (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.09 and earlier (2 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium (Advanced Edition) (Software Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Premium (Advanced Edition) (Software Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Premium (Advanced Edition) (Software Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.66 and earlier (1 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type (Cloud Edition)
Vendor
Six Apart Ltd.
Product
Movable Type (Cloud Edition)
Platforms
Unknown
Default status
Unknown
Movable Type (Cloud Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.6.0 (8 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type (Cloud Edition)
Vendor
Six Apart Ltd.
Product
Movable Type (Cloud Edition)
Platforms
Unknown
Default status
Unknown
Movable Type (Cloud Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7 r.5508 (7 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium (Cloud Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Premium (Cloud Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Premium (Cloud Edition) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.09 (2 series)
affected
Unavailable
Unavailable
Unavailable
None listed
Movable Type Premium (Cloud Edition)
Vendor
Six Apart Ltd.
Product
Movable Type Premium (Cloud Edition)
Platforms
Unknown
Default status
Unknown
Movable Type Premium (Cloud Edition) · Scoped product and version facts