GitHub Advisoryadvisory · Maven

GHSA-qp56-qj59-hjf8 NutzBoot vulnerable to information disclosure

LOW Published 2025-12-01 Modified 2025-12-02 Official page ↗
Aliases
CVE-2025-13804
Ecosystem
Maven
Packages
org.nutz:nutzboot-parent
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-200
Reviewed
2025-12-02

Affected packages

• Maven org.nutz:nutzboot-parent: <= 2.6.0-SNAPSHOT (no fix yet)

Description

A security flaw has been discovered in nutzam NutzBoot up to 2.6.0-SNAPSHOT. The impacted element is an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Ethereum Wallet Handler. Performing manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been released to the public and may be exploited.

Related

Alias · CVE (1)

  • CVE-2025-13804 A security flaw has been discovered in nutzam NutzBoot up to 2.6.0-SNAPSHOT. vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References