PT-2025-34903 · Basecamp+1 · Google Sign In+1

Muntrive · Published 2025-08-27 · Updated 2025-08-28 · CVE-2025-57821

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Basecamp Google Sign-In versions prior to 1.3.0

Description: A malformed URL can bypass the "same origin" check, potentially redirecting users to an unintended origin. This issue affects Rails applications using the library and storing flash information in a session cookie, which could be chained with an attack that allows arbitrary data injection into the session cookie.

Recommendations: Basecamp Google Sign-In versions prior to 1.3.0: Upgrade to version 1.3.0 or later. Basecamp Google Sign-In versions prior to 1.3.0: If upgrading is not possible, explicitly set SameSite=Lax or SameSite=Strict on the application session cookie to mitigate the chained attack.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-57821

GHSA-7PWC-WH6M-44Q3

Affected Products

Google Sign In

Rails

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57821.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/google_sign_in/CVE-2025-57821.yml · Exploit
• https://osv.dev/vulnerability/GHSA-7pwc-wh6m-44q3 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-57821 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-57821 · Security Note
• https://github.com/basecamp/google_sign_in/commit/85903651201257d4f14b97d4582e6d968ac32f15 · Note
• https://github.com/basecamp/google_sign_in/security/advisories/GHSA-7pwc-wh6m-44q3 · Note
• https://github.com/basecamp/google_sign_in/pull/73 · Note
• https://github.com/basecamp/google_sign_in/releases/tag/v1.3.0 · Note
• https://github.com/basecamp/google_sign_in · Note
• https://github.com/basecamp/google_sign_in/commit/a0548a604fb17e4eb1a57029f0d87e34e8499623 · Note
• https://twitter.com/VulmonFeeds/status/1960842252646793229 · Twitter Post
• https://t.me/CVEtracker/31039 · Telegram Post
• https://twitter.com/rubylandnews/status/1961192137359237558 · Twitter Post
• https://twitter.com/Muntrive/status/1960804870006694105 · Twitter Post