← Back

CVE-2025-1568

nvd nist
Published: Apr 16, 2025Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelines by insufficient access controls and misconfigurations in Gerrit's project.config.

Affected (1)

Products: Google: Chrome Os
Google
1 product
Chrome Os
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Chrome Os
Version 16063.87.0

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

Source: 7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f
Broken Link
Source: 7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f
Issue TrackingMailing List

Timeline

No history available yet.