CVE-2025-7763

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-7763
A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0. Affected is the function select of the file src/main/java/com/jeesite/modules/cms/web/SiteController.java of the component Site Controller. The manipulation of the argument redirect leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.
CVSS

No CVSS.

References
Link Resource
https://github.com/thinkgem/jeesite5/commit/3d06b8d009d0267f0255acc87ea19d29d07cedc3
https://github.com/thinkgem/jeesite5/issues/28
https://github.com/thinkgem/jeesite5/issues/28
https://github.com/thinkgem/jeesite5/issues/28#issuecomment-3045862239
https://github.com/thinkgem/jeesite5/issues/28#issuecomment-3045862239
https://vuldb.com/?ctiid.316758
https://vuldb.com/?id.316758
https://vuldb.com/?submit.616103
Configurations

No configuration.

History

18 Jul 2025, 07:15

Type Values Removed Values Added
Summary A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0. Affected is an unknown function of the component Site Controller/SSO. The manipulation leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue. Multiple endpoints are affected. A vulnerability, which was classified as problematic, was found in thinkgem JeeSite up to 5.12.0. Affected is the function select of the file src/main/java/com/jeesite/modules/cms/web/SiteController.java of the component Site Controller. The manipulation of the argument redirect leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.
References
  • {'url': 'https://vuldb.com/?submit.616104', 'name': 'Submit #616104 | JeeSite https://github.com/thinkgem/jeesite5 <=5.12.0 Open Redirect (Duplicate)', 'tags': [], 'refsource': ''}
  • {'url': 'https://github.com/thinkgem/jeesite5/issues/29', 'name': 'https://github.com/thinkgem/jeesite5/issues/29', 'tags': [], 'refsource': ''}
References () https://vuldb.com/?id.316758 - () https://vuldb.com/?id.316758 -
References () https://vuldb.com/?ctiid.316758 - () https://vuldb.com/?ctiid.316758 -
CVSS v2 : unknown
v3 : 4.3 		v2 : unknown
v3 : unknown
CWE CWE-601

17 Jul 2025, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-17 23:15

Updated : 2025-07-18 14:15

NVD link : CVE-2025-7763

Mitre link : CVE-2025-7763

JSON object : View

Products Affected

No product.

CWE

No CWE.