CVE-2025-8708

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-8708

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8708.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-8708

Published

2025-08-08T02:32:05.558Z

Modified

2026-07-15T01:48:56.565672175Z

Severity

1.3 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Antabot White-Jotter com.gm.wj.config.ShiroConfiguration ShiroConfiguration.java CookieRememberMeManager deserialization

Details

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the function CookieRememberMeManager of the file ShiroConfiguration.java of the component com.gm.wj.config.ShiroConfiguration. The manipulation with the input EVANNIGHTLY_WAOU leads to deserialization. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/8xxx/CVE-2025-8708.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "0.22"
                },
                {
                    "last_affected": "0.22"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-20",
        "CWE-502"
    ]
}

References

Affected packages

Git / github.com/antabot/white-jotter

Affected ranges

Type

GIT

Repo

https://github.com/antabot/white-jotter

Events

Introduced

e71e24f5bee9e9422963e030387b2344d8bc2f89

Last affected

e71e24f5bee9e9422963e030387b2344d8bc2f89

Database specific

{
    "cpe": "cpe:2.3:a:antabot:white-jotter:0.2.2:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "0.2.2"
        },
        {
            "last_affected": "0.2.2"
        }
    ]
}

Affected versions

0.*

0.2.2

v0.*

v0.2.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-8708.json"