LOW🇬🇧 English

CVE-2025-8708

CVSS 1.3v4.0pub. 2025-08-08upd. 2026-04-29

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLY_WAOU leads to deserialization. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

oryginał EN
CVSS Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Antabot White Jotter

    APP
    Antabot
    0.2.2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Deserialization
CWE
Referencje

Powiązane podatności

CVE-2024-57176HIGH7.6ten sam produkt

An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory tr...

CVE-2024-13029MEDIUM5.3ten sam produkt

A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected ...

CVE-2024-13031MEDIUM5.1ten sam produkt

A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an u...

CVE-2024-13032MEDIUM5.1ten sam produkt

A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vuln...

CVE-2024-13028MEDIUM6.3ten sam produkt

A vulnerability, which was classified as problematic, has been found in Antabot White-Jotter up to 0.2.2. This...