CVE-2025-11222_CVE-2025-11222

6.1 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential theft.

Basic Information

ID CVE-2025-11222

Source LY-Corporation

Published Dec 4, 2025 at 12:18

Modified Dec 4, 2025 at 14:41

Affected Product

Vendor LINE Corporation

Product Central Dogma

Version 0.77

Affected Versions LINE Corporation Central Dogma 0.77

CWE Classification

CWE-601

References

github.com /line/centraldogma/security/advisories/GHSA-4hr2-xf7w-jf76

{
    "lastseen": "",
    "description": "Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential theft.",
    "published": "2025-12-04T12:18:14.206Z",
    "modified": "2025-12-04T14:41:14.531Z",
    "type": "cve",
    "title": "CVE-2025-11222",
    "source": "LY-Corporation",
    "references": "https://github.com/line/centraldogma/security/advisories/GHSA-4hr2-xf7w-jf76",
    "id": "CVE-2025-11222",
    "bulletinFamily": "",
    "cwe": [
        "CWE-601"
    ],
    "cvelist": null,
    "sourceData": "LINE Corporation Central Dogma 0.77",
    "sourceHref": "",
    "cvss": {
        "score": 6.1,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Central Dogma",
    "version": "0.77",
    "vendor": "LINE Corporation",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}