CVE-2025-6552

CVE-2025-6552 affects java-aodeng Hope-Boot 1.0.0. The vulnerable component is the doLogin function in WebController.java (/src/main/java/com/hope/controller/WebController.java) where manipulation of the redirect_url parameter enables an open redirect. Remote exploitation is possible and the vuln...