CVE-2025-8526: Exrick xboot UploadController.java upload unrestricted upload
A vulnerability was found in Exrick xboot up to 3.3.4. It has been declared as critical. This vulnerability affects the function Upload of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/UploadController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Exrick xbootto a version that resolves this vulnerability.Fixed in 3.3.4
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8526?
CVE-2025-8526 is considered a critical vulnerability.
How do I fix CVE-2025-8526?
To fix CVE-2025-8526, upgrade Exrick xboot to version 3.3.5 or later.
What components are affected by CVE-2025-8526?
CVE-2025-8526 affects the Upload function in the UploadController.java file of Exrick xboot up to version 3.3.4.
What types of attacks could exploit CVE-2025-8526?
CVE-2025-8526 could be exploited for unauthorized file uploads, potentially leading to remote code execution.
Is there a workaround for CVE-2025-8526?
Currently, there is no known workaround for CVE-2025-8526, and updating is highly recommended.