CVE-2025-8528: Exrick xboot getMenuList sensitive information in a cookie
A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Affected is an unknown function of the file /xboot/permission/getMenuList. The manipulation leads to cleartext storage of sensitive information in a cookie. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8528?
CVE-2025-8528 is classified as problematic due to the potential exposure of sensitive information.
How do I fix CVE-2025-8528?
To fix CVE-2025-8528, ensure that sensitive information is not stored in cleartext in cookies and implement secure cookie attributes.
What versions of Exrick xboot are affected by CVE-2025-8528?
Exrick xboot versions up to 3.3.4 are affected by CVE-2025-8528.
What type of attack can be executed due to CVE-2025-8528?
CVE-2025-8528 allows for remote attacks that exploit the cleartext storage of sensitive information in cookies.
What component of Exrick xboot does CVE-2025-8528 affect?
CVE-2025-8528 affects the '/xboot/permission/getMenuList' function in Exrick xboot.