GitHub Advisoryadvisory · PyPI

GHSA-pfrv-63w8-q7rq Byaidu PDFMathTranslate vulnerable to open redirect

LOW Published 2025-10-30 Modified 2025-10-30 Official page ↗
Aliases
CVE-2025-50736
Ecosystem
PyPI
Packages
pdf2zh
Severity
Low
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:P
Weaknesses
CWE-601
Reviewed
2025-10-30

Affected packages

• PyPI pdf2zh: 1.9.9 (no fix yet)

Description

An open redirect vulnerability exists in Byaidu PDFMathTranslate v1.9.9 that allows attackers to craft URLs that cause the application to redirect users to arbitrary external websites via the file parameter to the /gradio_api endpoint. This vulnerability could be exploited for phishing attacks or to bypass security filters.

Related

Alias · CVE (1)

  • CVE-2025-50736 An open redirect vulnerability exists in Byaidu PDFMathTranslate v1.9.9 that allows attackers to craft URLs that cause the application to… vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References