CVE-2025-8528 - Exrick xboot getMenuList sensitive information in a cookie

Back Back to CVE browser

MEDIUM

Exrick xboot getMenuList sensitive information in a cookie

Published Aug 4, 2025

6.3

MEDIUM

CVSS 4.0

EPSS 0.31%

Description

A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Affected is an unknown function of the file /xboot/permission/getMenuList. The manipulation leads to cleartext storage of sensitive information in a cookie. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.

Affected products

Vendor Exrick Product Xboot Default
n/a
- Version
  3.3.0
  Status
  affected
  Constraints
  -
- Version
  3.3.1
  Status
  affected
  Constraints
  -
- Version
  3.3.2
  Status
  affected
  Constraints
  -
- Version
  3.3.3
  Status
  affected
  Constraints
  -
- Version
  3.3.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Exrick

Xboot

n/a

Version	Status	Constraints
3.3.0	affected	-
3.3.1	affected	-
3.3.2	affected	-
3.3.3	affected	-
3.3.4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-312

CWE-315

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-23558
Advisory
https://github.com/Exrick/xboot/issues/69
issue-trackingExploitIssue Tracking
https://github.com/Exrick/xboot/issues/69#issue-3252177305
exploitissue-trackingIssue Tracking
https://vuldb.com/?ctiid.318654
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.318654
vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.622175
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-23558		Advisory
https://github.com/Exrick/xboot/issues/69		issue-trackingExploitIssue Tracking
https://github.com/Exrick/xboot/issues/69#issue-3252177305		exploitissue-trackingIssue Tracking
https://vuldb.com/?ctiid.318654		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.318654		vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.622175		third-party-advisoryThird Party AdvisoryVDB Entry