CVE-2025-58067

Basecamp's Google Sign-In adds Google sign-in to Rails applications. Prior to version 1.3.1, it is possible to redirect a user to another origin if the "proceed_to" value in the session store is set to a protocol-relative URL. Normally the value of this URL is only written and read by the library or the calling application. However, it may be possible to set this session value from a malicious site with a form submission. Any Rails applications using the google_sign_in gem may be vulnerable, if this vector can be chained with another attack that is able to modify the OAuth2 request parameters. This issue has been patched in version 1.3.1. There are no workarounds.

• CWE-601

• https://github.com/basecamp/google_sign_in/commit/e97aef4626b1bcbd2c6f01f7dd25f12ac855d4cc
• https://github.com/basecamp/google_sign_in/pull/75
• https://github.com/basecamp/google_sign_in/releases/tag/v1.3.1
• https://github.com/basecamp/google_sign_in/security/advisories/GHSA-5jch-xhw4-r43v

Published

Aug 29, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-58061OpenEBS Local PV RawFile allows dynamic deployment of Statef…5.5
• CVE-2025-58062LSTM-Kirigaya's openmcp-client is a vscode plugin for mcp de…7.3
• CVE-2025-58063CoreDNS is a DNS server that chains plugins. Starting in ver…7.1
• CVE-2025-58064CKEditor 5 is a modern JavaScript rich-text editor with an M…2.3
• CVE-2025-58065Flask-AppBuilder is an application development framework. Pr…6.5
• CVE-2025-58066nptd-rs is a tool for synchronizing your computer's clock, i…5.3
• CVE-2025-58068Eventlet is a concurrent networking library for Python. Prio…9.1
• CVE-2025-58069The use of a hard-coded cryptographic key was discovered in …6.9
• CVE-2025-5807The Gwolle Guestbook plugin for WordPress is vulnerable to S…6.1
• CVE-2025-58070Pleasanter contains a stored cross-site scripting vulnerabil…6.1
• CVE-2025-58071When IPsec is configured on the BIG-IP system, undisclosed t…8.7
• CVE-2025-58072Improper limitation of a pathname to a restricted directory …8.7