CVE-2025-52552
FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable to open redirect and DOM-based XSS. Improper validation and lack of sanitization of this parameter allows attackers execute malicious JavaScript or redirect them to attacker-controlled sites. This issue has been patched in version 4.9.12.
Vendor
Product
CWE
Yayın Tarihi
2025-06-21 03:15:24
Güncelleme
2025-12-29 19:06:40
Source Identifier
security-advisories@github.com
KEV Date Added
-