Moderate severityNVD Advisory· Published Dec 4, 2025· Updated Dec 4, 2025

CVE-2025-11222

Description

Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential theft.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.linecorp.centraldogma:centraldogma-server-auth-shiroMaven	< 0.78.0	0.78.0

Affected products

ghsa-coords
pkg:maven/com.linecorp.centraldogma/centraldogma-server-auth-shiro
Range: < 0.78.0
LINE Corporation/Central Dogmav5
Range: 0.77

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-4hr2-xf7w-jf76ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-11222ghsaADVISORY
github.com/line/centraldogma/commit/95e7bbd77266493e4ec70b670bd91fa3e3289de0ghsaWEB
github.com/line/centraldogma/pull/1207ghsaWEB
github.com/line/centraldogma/security/advisories/GHSA-4hr2-xf7w-jf76ghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000