CVE-2025-50736

CVE-2025-50736

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An open redirect vulnerability exists in Byaidu PDFMathTranslate v1.9.9 that allows attackers to craft URLs that cause the application to redirect users to arbitrary external websites via the file parameter to the /gradio_api endpoint. This vulnerability could be exploited for phishing attacks or to bypass security filters.

CVSS 6.1 · Medium · EPSS 0.2%

Published

2025-10-30T00:00:00.000Z

Updated

2025-12-01T20:24:40.835Z

Stack: python

Check your server →