CVE-2025-55128

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-55128
HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumption vulnerability in the “userlog-index.php”. An attacker with access to the admin interface could request an arbitrarily large number of items per page, potentially leading to a denial of service.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://hackerone.com/reports/3413890
Configurations

No configuration.

History

02 Dec 2025, 02:15

Type Values Removed Values Added
Summary (en) HackerOne community member Dao Hoang Anh (yoyomiski) has reported an uncontrolled resource consumption vulnerability in the “userlog-index.php”. An attacker with access to the admin interface could request an arbitrarily large number of items per page, potentially leading to a denial of service (en) HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumption vulnerability in the “userlog-index.php”. An attacker with access to the admin interface could request an arbitrarily large number of items per page, potentially leading to a denial of service.

01 Dec 2025, 20:15

Type Values Removed Values Added
CWE CWE-400

20 Nov 2025, 19:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-11-20 19:16

Updated : 2025-12-02 02:15

NVD link : CVE-2025-55128

Mitre link : CVE-2025-55128

CVE.ORG link : CVE-2025-55128

JSON object : View

Products Affected

No product.

CWE
CWE-400

Uncontrolled Resource Consumption