Description
A vulnerability was found in Exrick xboot up to 3.3.4. It has been classified as problematic. This affects an unknown part of the component Spring Boot Admin/Spring Actuator. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Exrick | xboot | 3.3.0, 3.3.1, 3.3.2, 3.3.3, 3.3.4 | — |
References
- VDB-318651 | Exrick xboot Spring Boot Admin/Spring Actuator information disclosure vdb-entry
- VDB-318651 | CTI Indicators (IOB, IOC, TTP) signature permissions-required
- Submit #622172 | Exrick https://github.com/Exrick/xboot <=3.3.4 Sensitive Info Disclosure third-party-advisory
- https://github.com/Exrick/xboot/issues/72 issue-tracking
- https://github.com/Exrick/xboot/issues/72#issue-3252465914 exploit issue-tracking