A vulnerability was found in Exrick xboot up to 3.3.4. It has been declared as critical. This vulnerability affects the function Upload of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/UploadController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS
No CVSS.
References
Configurations
No configuration.
History
05 Aug 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-434 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
04 Aug 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-04 21:15
Updated : 2025-08-05 16:15
NVD link : CVE-2025-8526
Mitre link : CVE-2025-8526
JSON object : View
Products Affected
No product.
CWE
No CWE.