CVE-2025-1568

CVSS 8.8 HIGHEPSS 0.4%CWE-284

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 8.8EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 abr 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelines by insufficient access controls and misconfigurations in Gerrit's project.config.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

Google · ChromeOS

Referências

https://issues.chromium.org/issues/b/374279912 https://issuetracker.google.com/issues/374279912