Description (CNA)
A vulnerability was found in java-aodeng Hope-Boot 1.0.0. It has been classified as problematic. Affected is the function doLogin of the file /src/main/java/com/hope/controller/WebController.java of the component Login. The manipulation of the argument redirect_url leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| java-aodeng / Hope-Boot | affected 1.0.0 |
CWE
CWE-601
References
- https://vuldb.com/?id.313692
- https://vuldb.com/?ctiid.313692
- https://vuldb.com/?submit.596681
- https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250613-02.md
- https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250613-02.md#steps-to-reproduce
ADP enrichment
No English description supplied.
No references supplied.