Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-7c7b-a7gp-rbcs
Vulnerability ID VCID-7c7b-a7gp-rbcs
Aliases CVE-2025-68616
GHSA-983w-rhvv-gwmv
Summary
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
CWE-918 Server-Side Request Forgery (SSRF)
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 7.5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68616.json
epss 0.00022 https://api.first.org/data/v1/epss?cve=CVE-2025-68616
epss 0.00022 https://api.first.org/data/v1/epss?cve=CVE-2025-68616
epss 0.00022 https://api.first.org/data/v1/epss?cve=CVE-2025-68616
cvssv3.1 7.5 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-983w-rhvv-gwmv
cvssv3.1 7.5 https://github.com/Kozea/WeasyPrint
generic_textual HIGH https://github.com/Kozea/WeasyPrint
cvssv3.1 7.5 https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565
generic_textual HIGH https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565
ssvc Track https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565
cvssv3.1 7.5 https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmv
cvssv3.1_qr HIGH https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmv
generic_textual HIGH https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmv
ssvc Track https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmv
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2025-68616
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2025-68616
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68616.json
https://api.first.org/data/v1/epss?cve=CVE-2025-68616
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-68616
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/Kozea/WeasyPrint
1139189 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1139189
2430858 https://bugzilla.redhat.com/show_bug.cgi?id=2430858
b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565 https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565
CVE-2025-68616 https://nvd.nist.gov/vuln/detail/CVE-2025-68616
GHSA-983w-rhvv-gwmv https://github.com/advisories/GHSA-983w-rhvv-gwmv
GHSA-983w-rhvv-gwmv https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmv
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-68616.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/Kozea/WeasyPrint
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-20T15:42:42Z/ Found at https://github.com/Kozea/WeasyPrint/commit/b6a14f0f3f4ce9c0c75c1a2d73cb1c5d43f0e565
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmv
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-20T15:42:42Z/ Found at https://github.com/Kozea/WeasyPrint/security/advisories/GHSA-983w-rhvv-gwmv
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2025-68616
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.06327
EPSS Score 0.00022
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-10T18:13:36.397565+00:00 SUSE Severity Score Importer Import https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml 38.6.0