CVE-2025-11222CWE-601

CVE-2025-11222

Medium · published December 4, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential theft.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.2th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2025-12-04T18:15Z
Affected products (1)
ProductVersionsFixed in
linecorp/central_dogma< 0.78.00.78.0
References (1)
https://github.com/line/centraldogma/security/advisories/GHSA-4hr2-xf7w-jf76 · [email protected]
EPSS history
Timeline
  • 04 DEC 12:18Z
    Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted…
    cvelistv5