CVE-2025-7763

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-7763

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7763.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-7763

Published

2025-07-17T22:14:07.803Z

Modified

2026-07-15T01:48:57.088821487Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

thinkgem JeeSite Site Controller SiteController.java select redirect

Details

A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0. Affected is the function select of the file src/main/java/com/jeesite/modules/cms/web/SiteController.java of the component Site Controller. The manipulation of the argument redirect leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7763.json",
    "cwe_ids": [
        "CWE-601"
    ],
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.10"
                },
                {
                    "last_affected": "5.10"
                },
                {
                    "introduced": "5.11"
                },
                {
                    "last_affected": "5.11"
                },
                {
                    "introduced": "5.12.0"
                },
                {
                    "last_affected": "5.12.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/thinkgem/jeesite

Affected ranges

Type

GIT

Repo

https://github.com/thinkgem/jeesite

Events

Introduced

Fixed

eeb530562393fb481690a8ef0cb3bb15503f29f0

Database specific

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.12.1"
        }
    ],
    "cpe": "cpe:2.3:a:jeesite:jeesite:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE"
}

Type

GIT

Repo

https://github.com/thinkgem/jeesite5

Events

Introduced

53ceb352e0fef4195d97df5b397a9499b39bd123

Fixed

3d06b8d009d0267f0255acc87ea19d29d07cedc3

Database specific

{
    "extracted_events": [
        {
            "introduced": "5.0"
        },
        {
            "last_affected": "5.0"
        },
        {
            "introduced": "5.1"
        },
        {
            "last_affected": "5.1"
        },
        {
            "introduced": "5.2"
        },
        {
            "last_affected": "5.2"
        },
        {
            "introduced": "5.3"
        },
        {
            "last_affected": "5.3"
        },
        {
            "introduced": "5.4"
        },
        {
            "last_affected": "5.4"
        },
        {
            "introduced": "5.5"
        },
        {
            "last_affected": "5.5"
        },
        {
            "introduced": "5.6"
        },
        {
            "last_affected": "5.6"
        },
        {
            "introduced": "5.7"
        },
        {
            "last_affected": "5.7"
        },
        {
            "introduced": "5.8"
        },
        {
            "last_affected": "5.8"
        },
        {
            "introduced": "5.9"
        },
        {
            "last_affected": "5.9"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

5.*

5.0

5.1

5.2

5.3

5.4

5.5

5.6

5.7

5.8

5.9

v5.*

v5.0.0

v5.0.0.1

v5.0.1

v5.0.2

v5.0.3

v5.0.4

v5.1.0

v5.10.0.springboot3

v5.10.1.springboo3

v5.11.0.springboo3

v5.11.1.springboo3

v5.12.0.springboo3

v5.12.0.vue

v5.2.0

v5.2.1

v5.2.2

v5.3.0

v5.3.1

v5.3.2

v5.4.0

v5.5.0

v5.5.1

v5.5.2

v5.6.0

v5.7.0

v5.7.1

v5.8.0

v5.8.1

v5.9.0

v5.9.1

v5.9.1.springboot3

v5.9.2.springboot3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7763.json"