Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-11222 EUVD-2025-201153GHSA-4hr2-xf7w-jf76

Central Dogma's Login Function Has an Open Redirect Vulnerability

Published Dec 4, 2025 · Updated Dec 4, 2025 · Assigned by LY-Corporation

Description

Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential theft.

Affected products

VendorProductAffectedFixed
LINE Central Dogma 0.77 – < 0.78.0 0.78.0

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.linecorp.centraldogma:centraldogma-server-auth-shiro < 0.78.0 0.78.0 GHSA-4hr2-xf7w-jf76

References