| عنوان | Exrick https://github.com/Exrick/xboot <=3.3.4 User's Sensitive Information is included in Cookies |
|---|
| الوصف | In the latest version (v3.3.4) of xboot, there are security flaws in the cookie design. Sensitive user information including uid, username, nickname, mobile, email, address, sex, avatar URL, and birthday are all stored in cookies. If these cookies are compromised, attackers can leverage this information to launch more sophisticated attacks such as brute force attacks, social engineering, and phishing. |
|---|
| المصدر | ⚠️ https://github.com/Exrick/xboot/issues/69 |
|---|
| المستخدم | ZAST.AI (UID 87884) |
|---|
| ارسال | 25/07/2025 03:24 AM (1 سنة منذ) |
|---|
| الاعتدال | 04/08/2025 08:51 AM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 318654 [Exrick xboot حتى 3.3.4 getMenuList الكشف عن المعلومات] |
|---|
| النقاط | 19 |
|---|