CVE-2025-8525

Опубликовано: 04 авг. 2025

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

A vulnerability was found in Exrick xboot up to 3.3.4. It has been classified as problematic. This affects an unknown part of the component Spring Boot Admin/Spring Actuator. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Ссылки

https://github.com/Exrick/xboot/issues/72
Exploit
Issue Tracking
https://github.com/Exrick/xboot/issues/72#issue-3252465914
Exploit
Issue Tracking
https://vuldb.com/?ctiid.318651
Permissions Required
VDB Entry
https://vuldb.com/?id.318651
Third Party Advisory
VDB Entry
https://vuldb.com/?submit.622172
Third Party Advisory
VDB Entry
https://github.com/Exrick/xboot/issues/72
Exploit
Issue Tracking
https://github.com/Exrick/xboot/issues/72#issue-3252465914
Exploit
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exrick:xboot:*:*:*:*:*:*:*:*

Версия до 3.3.4 (включая)

EPSS

Процентиль: 13%

0.00043

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

NVD-CWE-noinfo

Связанные уязвимости

GHSA-phvf-48ww-v3m5