CVE-2025-13804
medium
CVSS v3
4.3
CVSS v2
4.0
VIR risk
4.3
Description
NutzBoot vulnerable to information disclosure
Predictions
Exploit likelihood
53%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Maven | org.nutz:nutzboot-parent | <=2.6.0-SNAPSHOT | |
References
- https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md
- https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-InfoLeak-1/report.md#vulnerability-details-and-poc
- https://vuldb.com/?ctiid.333814
- https://vuldb.com/?id.333814
- https://vuldb.com/?submit.692050
- https://nvd.nist.gov/vuln/detail/CVE-2025-13804
- https://github.com/nutzam/nutzboot
CWEs
CWE-200 CWE-284
Verify integrity in audit chain (admin only). AS-IS.