CVE-2025-1568
Last modified
CVE-2025-1568 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelines by insufficient access controls and misconfigurations in Gerrit's project.config.. EPSS estimates a 0.35% chance of exploitation in the next 30 days.
Description
Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution and Denial of Service via editing trusted pipelines by insufficient access controls and misconfigurations in Gerrit's project.config.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Chrome Os | 16063.87.0 |
References
- https://issuetracker.google.com/issues/374279912Issue Tracking, Mailing List
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-1568?
How severe is CVE-2025-1568?
How do I fix CVE-2025-1568?
Are you affected by CVE-2025-1568?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST