CVE-2025-8737: zlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect
A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the file src/main/java/com/central/oauth/handler/OauthLogoutSuccessHandler.java. The manipulation of the argument redirecturl leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8737?
CVE-2025-8737 is classified as problematic, indicating a significant potential impact on the affected system.
How do I fix CVE-2025-8737?
To address CVE-2025-8737, update your zlt2000 microservices-platform to a version later than 6.0.0.
Which versions are affected by CVE-2025-8737?
CVE-2025-8737 affects zlt2000 microservices-platform versions up to and including 6.0.0.
What component is impacted by CVE-2025-8737?
CVE-2025-8737 impacts the function onLogoutSuccess in the OauthLogoutSuccessHandler.java file.
What are the consequences of exploiting CVE-2025-8737?
Exploiting CVE-2025-8737 may allow attackers to manipulate the redirect_url argument, potentially compromising user session security.