Lucene search
K

XXL SSO is vulnerable to an Open Redirect through malicious manipulation of the redirect_url argument

๐Ÿ—“๏ธย 26 Jun 2025ย 18:31:28Reported byย GitHub Advisory DatabaseTypeย 
github
ย github
๐Ÿ”—ย github.com๐Ÿ‘ย 7ย Views

XXL SSO 1.1.0 vulnerable to Open Redirect via redirect_url argument manipulation, allowing remote attacks.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-6701
26 Jun 202516:51
โ€“circl
CNNVD
xxl-sso ่พ“ๅ…ฅ้ชŒ่ฏ้”™่ฏฏๆผๆดž
26 Jun 202500:00
โ€“cnnvd
CVE
CVE-2025-6701
26 Jun 202516:00
โ€“cve
Cvelist
CVE-2025-6701 Xuxueli xxl-sso doLogin redirect
26 Jun 202516:00
โ€“cvelist
EUVD
EUVD-2025-19203
3 Oct 202520:07
โ€“euvd
NVD
CVE-2025-6701
26 Jun 202516:15
โ€“nvd
OSV
CVE-2025-6701
26 Jun 202516:15
โ€“osv
OSV
GHSA-R26V-98QJ-48Q9 XXL SSO is vulnerable to an Open Redirect through malicious manipulation of the redirect_url argument
26 Jun 202518:31
โ€“osv
Positive Technologies
PT-2025-27000 ยท Xuxueli ยท Xuxueli Xxl-Sso
26 Jun 202500:00
โ€“ptsecurity
RedhatCVE
CVE-2025-6701
28 Jun 202516:23
โ€“redhatcve
Rows per page
Vulners
Node
com.xuxuelixxl-ssoRangeโ‰ค1.1.0maven

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

10 Jul 2025 17:46Current
6.9Medium risk
Vulners AI Score6.9
CVSS 3.13.5 - 6.1
CVSS 24
CVSS 45.1
CVSS 33.5
EPSS0.00151
SSVC
7