Advisories · Technology
Exrick xboot.
Every CVE that names Exrick xboot among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint
- Exrick xboot
- Broken access control
- CVSS 5.3 Medium
Exrick XBoot through 3.3.4 Data-Scope Bypass via openDataFilter Parameter
- Exrick xboot
- Broken access control
- CVSS 6.3 Medium
Exrick xboot getMenuList sensitive information in a cookie
- Exrick xboot
- Information disclosure
- CWE-315
- CVSS 5.3 Medium
Exrick xboot Swagger SecurityController.java server-side request forgery
- Exrick xboot
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Exrick xboot UploadController.java upload unrestricted upload
- Exrick xboot
- Broken access control
- Unrestricted file upload
- CVSS 6.9 Medium
Exrick xboot Spring Boot Admin/Spring Actuator information disclosure
- Exrick xboot
- Information disclosure
- Broken access control