8.8

CVE-2025-1568

EPSS 0.77%
Veröffentlicht 16.04.2025 23:06:28
Zuletzt bearbeitet 08.07.2025 18:07:07
Quelle 7f6e188d-c52a-4a19-8674-3c3fa7
CVE-Watchlists
Login
Unerledigt
Login

Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelines by insufficient access controls and misconfigurations in Gerrit's project.config.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Chrome Os Version16063.87.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.77%	0.731

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://issuetracker.google.com/issues/374279912

Mailing List

Issue Tracking

https://issues.chromium.org/issues/b/374279912

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2025-1568

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-1568

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-1568

EUVD