CVE-2025-0608

MediumCVSS 5.5/10Last modified Oct 9, 2026

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing.

This issue affects Logo Cloud: before 2025.R6.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-601

Affected software

VendorProductVersions
Logo Software Inc.Logo Cloud< 2025.R6

References

Timeline

Published
Oct 6, 2025
Last modified
Oct 9, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-06094.7Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Logo Software Inc. Logo Cloud aCVE-2025-06108.6Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery. This issue affects QR Menü: from s1.CVE-2025-06118.2Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafCVE-2025-06127.5Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption CVE-2025-06136.1The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, CVE-2025-06145.3Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability could allow an attacker to modify a single email to contaiCVE-2025-06155.3Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability allows an attacker to modify an email to contain the ‘+’ sCVE-2025-06168.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknolojik Center Telecommunication InCVE-2025-06175.9An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection CVE-2025-06186.5A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamperCVE-2025-06194.9Unsafe password recovery from configuration in M-Files Server before 25.1 allows a highly privileged user to recover external connector passCVE-2025-06204.9A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session.
CVE-2025-0608: Medium severity, CVSS 5.5 | Vulnix