CVE-2025-4328

A vulnerability was found in fp2952 spring-cloud-base up to 7f050dc6db9afab82c5ce1d41cd74ed255ec9bfa. It has been declared as problematic. Affected by this vulnerability is the function sendBack of the file /spring-cloud-base-master/auth-center/auth-center-provider/src/main/java/com/peng/auth/provider/config/web/MvcController.java of the component HTTP Header Handler. The manipulation of the argument Referer leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

• CWE-601

• https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250423-01.md
• https://vuldb.com/?ctiid.307429
• https://vuldb.com/?id.307429
• https://vuldb.com/?submit.564161
• https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250423-01.md

Published

May 6, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-43274A privacy issue was addressed by removing the vulnerable cod…4.4
• CVE-2025-43275A race condition was addressed with additional validation. T…9.8
• CVE-2025-43276A logic error was addressed with improved error handling. Th…5.3
• CVE-2025-43277The issue was addressed with improved memory handling. This …7.8
• CVE-2025-43278This issue was addressed with improved handling of symlinks.…5.5
• CVE-2025-43279A privacy issue was addressed with improved private data red…6.2
• CVE-2025-43280The issue was resolved by not loading remote images. This is…4.7
• CVE-2025-43281The issue was addressed with improved authentication. This i…7.8
• CVE-2025-43282A double free issue was addressed with improved memory manag…5.5
• CVE-2025-43283An out-of-bounds read was addressed with improved bounds che…3.3
• CVE-2025-43284An out-of-bounds read was addressed with improved bounds che…5.5
• CVE-2025-43285A permissions issue was addressed with additional restrictio…5.5