CVE-2025-7763

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-7763
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7763.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-7763
Published
2025-07-17T23:15:23.217Z
Modified
2026-04-10T05:37:05.154478Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
Summary
[none]
Details

A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0. Affected is the function select of the file src/main/java/com/jeesite/modules/cms/web/SiteController.java of the component Site Controller. The manipulation of the argument redirect leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.

References

Affected packages

Git / github.com/thinkgem/jeesite

Affected ranges

Type
GIT
Repo
https://github.com/thinkgem/jeesite
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
eeb530562393fb481690a8ef0cb3bb15503f29f0
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.12.1"
        }
    ]
}
Type
GIT
Repo
https://github.com/thinkgem/jeesite5
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
3d06b8d009d0267f0255acc87ea19d29d07cedc3

Affected versions

v4.*
v4.0.1
v4.0.2
v4.0.3
v4.0.4
v4.0.5
v4.0.6
v4.0.7
v4.1.0
v4.1.1
v4.1.2
v4.1.3
v4.1.4
v4.1.8
v4.1.8.1
v4.1.8.2
v4.1.9
v4.2.0
v4.2.1
v4.2.2
v4.2.3
v4.2.3.1
v4.2.3.2
v4.3.0
v4.3.0.2
v5.*
v5.0.0
v5.0.0.1
v5.0.1
v5.0.2
v5.0.3
v5.0.4
v5.1.0
v5.10.0.springboot3
v5.10.1.springboo3
v5.11.0.springboo3
v5.11.1.springboo3
v5.12.0.springboo3
v5.12.0.vue
v5.2.0
v5.2.1
v5.2.2
v5.3.0
v5.3.1
v5.3.2
v5.4.0
v5.5.0
v5.5.1
v5.5.2
v5.6.0
v5.7.0
v5.7.1
v5.8.0
v5.8.1
v5.9.0
v5.9.1
v5.9.1.springboot3
v5.9.2.springboot3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7763.json"