Exrick xboot getMenuList sensitive information in a cookie_CVE-2025-8528

6.3 / 10

MEDIUM

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Affected is an unknown function of the file /xboot/permission/getMenuList. The manipulation leads to cleartext storage of sensitive information in a cookie. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

Basic Information

ID CVE-2025-8528

Source VulDB

Published Aug 4, 2025 at 22:02

Modified Aug 5, 2025 at 13:35

Affected Product

Vendor Exrick

Product xboot

Version 3.3.0

Affected Versions Exrick xboot 3.3.0
Exrick xboot 3.3.1
Exrick xboot 3.3.2
Exrick xboot 3.3.3
Exrick xboot 3.3.4

CWE Classification

CWE-315 CWE-312

References

{
    "lastseen": "",
    "description": "A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Affected is an unknown function of the file /xboot/permission/getMenuList. The manipulation leads to cleartext storage of sensitive information in a cookie. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.",
    "published": "2025-08-04T22:02:06.163Z",
    "modified": "2025-08-05T13:35:38.680Z",
    "type": "cve",
    "title": "Exrick xboot getMenuList sensitive information in a cookie",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.318654\nhttps://vuldb.com/?ctiid.318654\nhttps://vuldb.com/?submit.622175\nhttps://github.com/Exrick/xboot/issues/69\nhttps://github.com/Exrick/xboot/issues/69#issue-3252177305",
    "id": "CVE-2025-8528",
    "bulletinFamily": "",
    "cwe": [
        "CWE-315",
        "CWE-312"
    ],
    "cvelist": null,
    "sourceData": "Exrick xboot 3.3.0\nExrick xboot 3.3.1\nExrick xboot 3.3.2\nExrick xboot 3.3.3\nExrick xboot 3.3.4",
    "sourceHref": "",
    "cvss": {
        "score": 6.3,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "xboot",
    "version": "3.3.0",
    "vendor": "Exrick",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}