{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.0"}],"component":"com.xuxueli:xxl-sso","cve_ids":["CVE-2025-6701"],"ecosystem":"Maven","epss":0.00322,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r26v-98qj-48q9","id":"tcs_01M5N9AMXC0JFTSWM5Z4ZJ8K4N","modified_at":"2025-07-10T18:12:21.630409Z","published_at":"2025-06-26T18:31:28Z","references":["https://osv.dev/vulnerability/GHSA-r26v-98qj-48q9","https://nvd.nist.gov/vuln/detail/CVE-2025-6701","https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250616-02.md","https://github.com/xuxueli/xxl-sso","https://vuldb.com/?ctiid.313967","https://vuldb.com/?id.313967","https://vuldb.com/?submit.597472"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-r26v-98qj-48q9","url":"https://osv.dev/vulnerability/GHSA-r26v-98qj-48q9"}],"summary":"XXL SSO is vulnerable to an Open Redirect through malicious manipulation of the redirect_url argument"}