PT-2025-29981 · Thinkgem · Jeesite

Zast.Ai · Published 2025-07-17 · Updated 2025-11-11 · CVE-2025-7763

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions thinkgem JeeSite versions up to 5.12.0

Description A problematic vulnerability exists in thinkgem JeeSite. The select function within the src/main/java/com/jeesite/modules/cms/web/SiteController.java file of the Site Controller component is affected. Manipulation of the redirect argument results in an open redirect. The attack can be launched remotely, and the exploit has been publicly disclosed. Multiple endpoints are affected.

Recommendations Apply patch 3d06b8d009d0267f0255acc87ea19d29d07cedc3 to resolve this issue.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-7763

Affected Products

Jeesite

References · 19

• 🔥 https://github.com/thinkgem/jeesite5/issues/29 · Exploit
• 🔥 https://github.com/thinkgem/jeesite5/issues/28 · Exploit
• 🔥 https://github.com/thinkgem/jeesite5/issues/28#issuecomment-3045862239 · Exploit
• https://github.com/thinkgem/jeesite5/commit/3d06b8d009d0267f0255acc87ea19d29d07cedc3 · Patch
• https://osv.dev/vulnerability/CVE-2025-7763 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-7763 · Security Note
• https://twitter.com/VulmonFeeds/status/1946052750401237310 · Twitter Post
• https://twitter.com/zast_ai/status/1988257048329679246 · Twitter Post
• https://t.me/cveNotify/129796 · Telegram Post
• https://t.me/cvenotify/129405 · Telegram Post
• https://t.me/cvenotify/129439 · Telegram Post
• https://t.me/cvetracker/28089 · Telegram Post
• https://t.me/cvenotify/129393 · Telegram Post
• https://vuldb.com/?ctiid.316758 · Note
• https://twitter.com/CVEnew/status/1945976936070553757 · Twitter Post