CVE-2025-7863 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in thinkgem JeeSite up to 5.12.0 and classified as problematic. Affected by this issue is the function redirectUrl of the file src/mai…
Medium CVSS: 5.1

CVE-2025-7863

A vulnerability was found in thinkgem JeeSite up to 5.12.0 and classified as problematic. Affected by this issue is the function redirectUrl of the file src/main/java/com/jeesite/common/web/http/ServletUtils.java. The manipulation of the argument url leads to open redirect. The attack may be launched remotely. The name of the patch is 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.
Vendor
Jeesite
Product
Jeesite
CWE
CWE-601
Yayın Tarihi
2025-07-20 03:15:24
Güncelleme
2025-08-25 17:06:49
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-601 Jeesite MEDIUM Jeesite 2025

Referanslar

https://github.com/thinkgem/jeesite5/commit/3d06b8d009d0267f0255acc87ea19d29d07cedc3 https://github.com/thinkgem/jeesite5/issues/30 https://github.com/thinkgem/jeesite5/issues/30#issuecomment-3045861920 https://vuldb.com/?ctiid.316976 https://vuldb.com/?id.316976 https://vuldb.com/?submit.618188 https://github.com/thinkgem/jeesite5/issues/30 https://github.com/thinkgem/jeesite5/issues/30#issuecomment-3045861920