CVE Feed

    Dashboard / CVE / CVE-2025-7863

    CVE-2025-7863

    A vulnerability was found in thinkgem JeeSite up to 5.12.0 and classified as problematic. Affected by this issue is the function redirectUrl of the file src/main/java/com/jeesite/common/web/http/ServletUtils.java. The manipulation of the argument url leads to open redirect. The attack may be launched remotely. The name of the patch is 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.

    Published:Jul 20, 2025
    Last Modified:Jul 22, 2025
    EPS:Jul 20, 2025
    EPSS Score:0.00032
    CVSS Score:3.5

    Affected Products

    No affected product recorded yet

    Exploits

    https://github.com/thinkgem/jeesite5/issues/30https://github.com/thinkgem/jeesite5/issues/30

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-178 Cross-Site Flashing

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High