CVE-2025-15241 | CloudPanel Community Edition up to 2.5.1 HTTP Header /admin/users Referer redirect

December 29, 2025 Yanac

A vulnerability described as problematic has been identified in CloudPanel Community Edition up to 2.5.1. The affected element is an unknown function of the file /admin/users of the component HTTP Header Handler. Such manipulation of the argument Referer leads to open redirect.

This vulnerability is referenced as CVE-2025-15241. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More