CVE-2025-13804

The record

A security flaw has been discovered in nutzam NutzBoot up to 2.6.0-SNAPSHOT. The impacted element is an unknown function of the file nutzboot-demo/nutzboot-demo-simple/nutzboot-demo-simple-web3j/src/main/java/io/nutz/demo/simple/module/EthModule.java of the component Ethereum Wallet Handler. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

Affected packages

Related vulnerabilities

• GHSA-qp56-qj59-hjf8 NutzBoot vulnerable to information disclosure Same vulnerability
• GHSA-fgmj-6h3v-4q56 NutzBoot vulnerable to deserialization Also affects org.nutz:nutzboot-parent
• CVE-2025-13806 A security vulnerability has been detected in nutzam NutzBoot up to 2.6.0-SNAPSHOT. Also affects org.nutz:nutzboot-parent
• CVE-2025-13805 A weakness has been identified in nutzam NutzBoot up to 2.6.0-SNAPSHOT. Also affects org.nutz:nutzboot-parent
• CVE-2026-114657 Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows… CWE-200
• CVE-2026-114574 A security vulnerability has been detected in massCodeIO massCode 5.10. CWE-200
• CVE-2026-111756 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows… CWE-200
• CVE-2026-111755 follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows… CWE-200