PT-2025-32408 · Unknown · Zlt2000 Microservices-Platform

Zast.Ai · Published 2025-08-08 · Updated 2025-08-08 · CVE-2025-8737

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions zlt2000 microservices-platform versions through 6.0.0

Description A problematic issue exists in zlt2000 microservices-platform. The issue is related to an open redirect vulnerability within the onLogoutSuccess function located in the file src/main/java/com/central/oauth/handler/OauthLogoutSuccessHandler.java. Manipulation of the redirect url argument can trigger the vulnerability, allowing for remote exploitation. The exploit has been publicly disclosed.

Recommendations versions prior to 6.0.1 At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-8737

Affected Products

Zlt2000 Microservices-Platform

References · 10

• 🔥 https://github.com/zlt2000/microservices-platform/issues/78#issue-3264847333 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8737 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8737 · Vendor Advisory
• https://github.com/zlt2000/microservices-platform/issues/78 · Note
• https://t.me/CVEtracker/29548 · Telegram Post
• https://vuldb.com/?ctiid.319233 · Note
• https://twitter.com/CVEnew/status/1953906642774270079 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1953918363349959151 · Twitter Post
• https://vuldb.com/?submit.623477 · Note
• https://vuldb.com/?id.319233 · Note