| عنوان | https://github.com/jeecgboot/JeecgBoot JeecgBoot v3.9.2 Open Redirect |
|---|
| الوصف | JeecgBoot v3.9.2 contains an Open Redirect vulnerability in the OAuth2 login flow. The state parameter in /sys/thirdLogin/oauth2/{source}/login and /sys/thirdLogin/oauth2/{source}/callback is user-controlled and passed directly to HttpServletResponse.sendRedirect() without validation.
An attacker can exploit this to redirect users to arbitrary URLs. In the OAuth2 callback flow, the victim's JWT token is appended to the redirect URL, which may lead to token leakage and account takeover. |
|---|
| المصدر | ⚠️ https://github.com/jeecgboot/JeecgBoot/issues/9639 |
|---|
| المستخدم | mukyuuhate (UID 93052) |
|---|
| ارسال | 22/05/2026 08:30 AM (23 أيام منذ) |
|---|
| الاعتدال | 07/06/2026 03:48 PM (16 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 369122 [JeecgBoot حتى 3.9.2 Third-Party Login ThirdLoginController.java HttpServletResponse.sendRedirect state] |
|---|
| النقاط | 20 |
|---|