Xboot
Monthly
Authenticated low-privileged users in Exrick XBoot through 3.3.4 can bypass role-based data-scope restrictions and read user records from any department by sending GET /xboot/user/getByDepartmentId/{departmentId} with arbitrary department IDs. The endpoint fails to enforce the data-scope filter, exposing usernames, real names, mobile numbers, emails, and account status (CWE-639 IDOR). The flaw has a moderate CVSS 3.1 score of 5.3 (medium) and requires only a valid session (PR:L, no user interaction); no public exploit code or active exploitation has been identified at time of analysis.
Information disclosure in Exrick XBoot through 3.3.4 allows any authenticated user to defeat server-side role data-scope restrictions by appending the parameter openDataFilter=false to the department getByParentId or search endpoints, causing the API to return the entire organization's department tree and names outside the caller's assigned scope. The underlying flaw is an improper-authorization condition (CWE-863) rated medium severity (CVSS 5.3, CVSS:4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L), and the impact is limited to organizational-structure disclosure - no credential exposure, data modification, or availability effect. Exploitation requires a valid logged-in XBoot account whose role carries data-scope restrictions (PR:L); no public exploit code was identified at time of analysis, although a public technical write-up of the bypass and the vulnerable source code are both referenced in the advisory data.
A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
A vulnerability was found in Exrick xboot up to 3.3.4. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Exrick xboot up to 3.3.4. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Exrick xboot up to 3.3.4. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Authenticated low-privileged users in Exrick XBoot through 3.3.4 can bypass role-based data-scope restrictions and read user records from any department by sending GET /xboot/user/getByDepartmentId/{departmentId} with arbitrary department IDs. The endpoint fails to enforce the data-scope filter, exposing usernames, real names, mobile numbers, emails, and account status (CWE-639 IDOR). The flaw has a moderate CVSS 3.1 score of 5.3 (medium) and requires only a valid session (PR:L, no user interaction); no public exploit code or active exploitation has been identified at time of analysis.
Information disclosure in Exrick XBoot through 3.3.4 allows any authenticated user to defeat server-side role data-scope restrictions by appending the parameter openDataFilter=false to the department getByParentId or search endpoints, causing the API to return the entire organization's department tree and names outside the caller's assigned scope. The underlying flaw is an improper-authorization condition (CWE-863) rated medium severity (CVSS 5.3, CVSS:4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L), and the impact is limited to organizational-structure disclosure - no credential exposure, data modification, or availability effect. Exploitation requires a valid logged-in XBoot account whose role carries data-scope restrictions (PR:L); no public exploit code was identified at time of analysis, although a public technical write-up of the bypass and the vulnerable source code are both referenced in the advisory data.
A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.
A vulnerability was found in Exrick xboot up to 3.3.4. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Exrick xboot up to 3.3.4. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Exrick xboot up to 3.3.4. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.