PT-2025-49143 · Yzcheng90 · X-Springboot

Liuchengjie01 · Published 2025-12-04 · Updated 2025-12-08 · CVE-2025-55948

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions yzcheng90 X-SpringBoot version 6.0

Description The issue stems from a role-based access control (RBAC) implementation that relies on both frontend menu systems and backend permission tables, lacking atomic synchronization between them. A desynchronization occurs when frontend menu updates, like privilege revocation, do not immediately reflect in the backend permission table. This allows attackers to bypass UI restrictions and directly access privileged functions through tools like Postman by sending API requests to endpoints that should be inaccessible. Attackers can perform actions such as creating high-permission user accounts, accessing sensitive data, and executing admin-level commands. The vulnerable API endpoints are accessed directly, bypassing the intended access controls. The vulnerable parameters or variables are not explicitly mentioned.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-55948

Affected Products

X-Springboot

References · 6

• 🔥 https://github.com/liuchengjie01/vuln_db/blob/master/x-springboot3x-vul/x-springboot3x-vul.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-55948 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-55948 · Security Note
• https://github.com/yzcheng90/X-SpringBoot · Note
• https://t.me/cveNotify/145189 · Telegram Post
• https://twitter.com/CVEnew/status/1996690732904861888 · Twitter Post