CVE-2025-11273 | LaChatterie Verger up to 1.2.10 provider.ts redirectToAuthorization URL deserialization

A vulnerability categorized as critical has been discovered in LaChatterie Verger up to 1.2.10. This impacts the function redirectToAuthorization of the file /src/main/services/mcp/oauth/provider.ts. The manipulation of the argument URL results in deserialization.

This vulnerability is identified as CVE-2025-11273. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.