CVE-2025-8527: Exrick xboot Swagger SecurityController.java server-side request forgery
A vulnerability was found in Exrick xboot up to 3.3.4. It has been rated as critical. This issue affects some unknown processing of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/SecurityController.java of the component Swagger. The manipulation of the argument loginUrl leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8527?
CVE-2025-8527 has been rated as critical due to its potential impact on the affected software.
How do I fix CVE-2025-8527?
To fix CVE-2025-8527, it is recommended to upgrade Exrick xboot to a version later than 3.3.4.
What components are affected by CVE-2025-8527?
CVE-2025-8527 affects the Swagger component within the Exrick xboot application.
What versions of Exrick xboot are vulnerable to CVE-2025-8527?
Exrick xboot versions up to and including 3.3.4 are vulnerable to CVE-2025-8527.
What type of vulnerability is CVE-2025-8527?
CVE-2025-8527 is characterized as a critical vulnerability within the processing of security controls.