CVE-2025-7785 — MEDIUM (4.3)

Q: How severe is CVE-2025-7785?

CVE-2025-7785 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2025-7785?

Check the references section above for vendor advisories and patch information. Affected products include: Jeesite Jeesite.

Vulnerability Description

A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the function sso of the file src/main/java/com/jeesite/modules/sys/web/SsoController.java. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

NONE

Affected Products

Vendor	Product	Versions
Jeesite	Jeesite	< 5.12.1

Related Weaknesses (CWE)

CWE-601

References

https://github.com/thinkgem/jeesite5/commit/3d06b8d009d0267f0255acc87ea19d29d07cPatch
https://github.com/thinkgem/jeesite5/issues/29ExploitIssue Tracking
https://github.com/thinkgem/jeesite5/issues/29#issue-3209433725ExploitIssue Tracking
https://github.com/thinkgem/jeesite5/issues/29#issuecomment-3045862084Issue Tracking
https://vuldb.com/?ctiid.316846Permissions RequiredVDB Entry
https://vuldb.com/?id.316846Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.616104Third Party AdvisoryVDB Entry
https://github.com/thinkgem/jeesite5/issues/29ExploitIssue Tracking
https://github.com/thinkgem/jeesite5/issues/29#issue-3209433725ExploitIssue Tracking
https://github.com/thinkgem/jeesite5/issues/29#issuecomment-3045862084Issue Tracking

FAQ

What is CVE-2025-7785?

CVE-2025-7785 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the function sso of the file src/main/java/com/jeesite/modules/sys/web/SsoController.ja...

How severe is CVE-2025-7785?

CVE-2025-7785 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-7785?

Check the references section above for vendor advisories and patch information. Affected products include: Jeesite Jeesite.