CVE-2025-4132 in Corporate Website
Summary
by MITRE • 05/08/2025
Rapid7 Corporate Website prior to May 2nd 2025, suffered from a URL Redirection to Untrusted Site ('Open Redirect') vulnerability whereby, due to misconfigured headers, an attacker could successfully redirect users to a malicious site of their control. This vulnerability has been fixed as of May 2nd 2025.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.