LOW🇵🇱 Wersja polska

CVE-2025-8708

CVSS 1.3v4.0pub. 2025-08-08upd. 2026-04-29

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLY_WAOU leads to deserialization. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

CVSS Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Antabot White Jotter

    APP
    Antabot
    0.2.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Deserialization
CWE
References

Related vulnerabilities

CVE-2024-57176HIGH7.6ten sam produkt

An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory tr...

CVE-2024-13029MEDIUM5.3ten sam produkt

A vulnerability, which was classified as problematic, was found in Antabot White-Jotter up to 0.2.2. Affected ...

CVE-2024-13031MEDIUM5.1ten sam produkt

A vulnerability classified as problematic has been found in Antabot White-Jotter up to 0.2.2. Affected is an u...

CVE-2024-13032MEDIUM5.1ten sam produkt

A vulnerability classified as problematic was found in Antabot White-Jotter up to 0.2.2. Affected by this vuln...

CVE-2024-13028MEDIUM6.3ten sam produkt

A vulnerability, which was classified as problematic, has been found in Antabot White-Jotter up to 0.2.2. This...