8.8Hoch
CVE-2025-1568
Beschreibung
Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelines by insufficient access controls and misconfigurations in Gerrit's project.config.
Schwachstellentyp (CWE):
CWE-284
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://issuetracker.google.com/issues/374279912 Issue TrackingMailing List
- https://issues.chromium.org/issues/b/374279912 Broken Link
CPE-Treffer (NVD) (1)
cpe:2.3:o:google:chrome_os:16063.87.0:*:*:*:*:*:*:*