CVE-2025-58067

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-58067
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-58067.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-58067
Aliases
Published
2025-08-29T21:05:22.209Z
Modified
2026-04-02T12:56:12.292967Z
Severity
  • 4.2 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVSS Calculator
Summary
Basecamp's Google Sign-In for Rails allowed redirects to protocol-relative URI
Details

Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.1, it is possible to redirect a user to another origin if the "proceedto" value in the session store is set to a protocol-relative URL. Normally the value of this URL is only written and read by the library or the calling application. However, it may be possible to set this session value from a malicious site with a form submission. Any Rails applications using the googlesign_in gem may be vulnerable, if this vector can be chained with another attack that is able to modify the OAuth2 request parameters. This issue has been patched in version 1.3.1. There are no workarounds.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-601"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58067.json"
}
References

Affected packages

Git / github.com/basecamp/google_sign_in

Affected ranges

Type
GIT
Repo
https://github.com/basecamp/google_sign_in
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e97aef4626b1bcbd2c6f01f7dd25f12ac855d4cc
Type
GIT
Repo
https://github.com/basecamp/google_sign_in
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e7f2a9ab59fe38020781560e8989f9697ace75c2

Affected versions

v0.*
v0.1
v0.1.1
v0.1.2
v0.1.3
v0.1.4
v1.*
v1.0.0
v1.0.1
v1.0.2
v1.1.0
v1.1.1
v1.1.2
v1.2.0
v1.2.1
v1.3.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-58067.json"