CVE-2025-7785mediumCWE-601

CVE-2025-7785: fallo de gravedad media en thinkgem JeeSite

thinkgem JeeSite SsoController.java sso redirect

Publicada el

Seguir esta CVE+ Monitorear JeeSite

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 0.5%
A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the function sso of the file src/main/java/com/jeesite/modules/sys/web/SsoController.java. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Productos afectados
thinkgem · JeeSite
CVEs relacionadas — thinkgem JeeSite

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-3405LOWthinkgem JeeSite Connection path traversalEPSS 0.7%CVE-2025-5186MEDIUMthinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgeryEPSS 0.5%CVE-2025-7763MEDIUMthinkgem JeeSite Site Controller SiteController.java select redirectEPSS 0.5%CVE-2024-8112MEDIUMthinkgem JeeSite Cookie login cross site scriptingEPSS 0.5%CVE-2025-7863MEDIUMthinkgem JeeSite ServletUtils.java redirectUrlEPSS 0.4%CVE-2026-3404LOWthinkgem JeeSite Endpoint CasOutHandler.java xml external entity referenceEPSS 0.4%