CVE-2025-7785

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-7785
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7785.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-7785
Published
2025-07-18T12:15:24.520Z
Modified
2026-04-10T05:37:05.173951Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
Summary
[none]
Details

A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the function sso of the file src/main/java/com/jeesite/modules/sys/web/SsoController.java. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.

References

Affected packages

Git / github.com/thinkgem/jeesite

Affected ranges

Type
GIT
Repo
https://github.com/thinkgem/jeesite
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
eeb530562393fb481690a8ef0cb3bb15503f29f0
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.12.1"
        }
    ]
}
Type
GIT
Repo
https://github.com/thinkgem/jeesite5
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
3d06b8d009d0267f0255acc87ea19d29d07cedc3

Affected versions

v4.*
v4.0.1
v4.0.2
v4.0.3
v4.0.4
v4.0.5
v4.0.6
v4.0.7
v4.1.0
v4.1.1
v4.1.2
v4.1.3
v4.1.4
v4.1.8
v4.1.8.1
v4.1.8.2
v4.1.9
v4.2.0
v4.2.1
v4.2.2
v4.2.3
v4.2.3.1
v4.2.3.2
v4.3.0
v4.3.0.2
v5.*
v5.0.0
v5.0.0.1
v5.0.1
v5.0.2
v5.0.3
v5.0.4
v5.1.0
v5.10.0.springboot3
v5.10.1.springboo3
v5.11.0.springboo3
v5.11.1.springboo3
v5.12.0.springboo3
v5.12.0.vue
v5.2.0
v5.2.1
v5.2.2
v5.3.0
v5.3.1
v5.3.2
v5.4.0
v5.5.0
v5.5.1
v5.5.2
v5.6.0
v5.7.0
v5.7.1
v5.8.0
v5.8.1
v5.9.0
v5.9.1
v5.9.1.springboot3
v5.9.2.springboot3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7785.json"