A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This impacts an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Transaction API. The manipulation of the argument from/to/wei leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
References
Configurations
No configuration.
History
01 Dec 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-UnauthorizedTransfer-1/report.md - | |
| References | () https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-UnauthorizedTransfer-1/report.md#vulnerability-details-and-poc - |
01 Dec 2025, 05:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-01 05:16
Updated : 2025-12-01 15:39
NVD link : CVE-2025-13806
Mitre link : CVE-2025-13806
CVE.ORG link : CVE-2025-13806
JSON object : View
Products Affected
No product.