CVE-2025-7785

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-7785

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7785.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-7785

Published

2025-07-18T11:44:07.100Z

Modified

2026-07-15T01:48:55.928359880Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

thinkgem JeeSite SsoController.java sso redirect

Details

A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the function sso of the file src/main/java/com/jeesite/modules/sys/web/SsoController.java. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7785.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "5.10"
                },
                {
                    "last_affected": "5.10"
                },
                {
                    "introduced": "5.11"
                },
                {
                    "last_affected": "5.11"
                },
                {
                    "introduced": "5.12.0"
                },
                {
                    "last_affected": "5.12.0"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-601"
    ]
}

References

Affected packages

Git / github.com/thinkgem/jeesite

Affected ranges

Type

GIT

Repo

https://github.com/thinkgem/jeesite

Events

Introduced

Fixed

eeb530562393fb481690a8ef0cb3bb15503f29f0

Database specific

{
    "cpe": "cpe:2.3:a:jeesite:jeesite:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "5.12.1"
        }
    ],
    "source": "CPE_RANGE"
}

Type

GIT

Repo

https://github.com/thinkgem/jeesite5

Events

Introduced

53ceb352e0fef4195d97df5b397a9499b39bd123

Fixed

3d06b8d009d0267f0255acc87ea19d29d07cedc3

Database specific

{
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "5.0"
        },
        {
            "last_affected": "5.0"
        },
        {
            "introduced": "5.1"
        },
        {
            "last_affected": "5.1"
        },
        {
            "introduced": "5.2"
        },
        {
            "last_affected": "5.2"
        },
        {
            "introduced": "5.3"
        },
        {
            "last_affected": "5.3"
        },
        {
            "introduced": "5.4"
        },
        {
            "last_affected": "5.4"
        },
        {
            "introduced": "5.5"
        },
        {
            "last_affected": "5.5"
        },
        {
            "introduced": "5.6"
        },
        {
            "last_affected": "5.6"
        },
        {
            "introduced": "5.7"
        },
        {
            "last_affected": "5.7"
        },
        {
            "introduced": "5.8"
        },
        {
            "last_affected": "5.8"
        },
        {
            "introduced": "5.9"
        },
        {
            "last_affected": "5.9"
        }
    ]
}

Affected versions

5.*

5.0

5.1

5.2

5.3

5.4

5.5

5.6

5.7

5.8

5.9

v5.*

v5.0.0

v5.0.0.1

v5.0.1

v5.0.2

v5.0.3

v5.0.4

v5.1.0

v5.10.0.springboot3

v5.10.1.springboo3

v5.11.0.springboo3

v5.11.1.springboo3

v5.12.0.springboo3

v5.12.0.vue

v5.2.0

v5.2.1

v5.2.2

v5.3.0

v5.3.1

v5.3.2

v5.4.0

v5.5.0

v5.5.1

v5.5.2

v5.6.0

v5.7.0

v5.7.1

v5.8.0

v5.8.1

v5.9.0

v5.9.1

v5.9.1.springboot3

v5.9.2.springboot3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7785.json"