{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-47775", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2025-05-09T19:49:35.619Z", "datePublished": "2025-05-14T15:18:37.058Z", "dateUpdated": "2025-05-14T15:42:42.206Z"}, "containers": {"cna": {"title": "Bullfrog's DNS over TCP bypasses domain filtering", "problemTypes": [{"descriptions": [{"cweId": "CWE-201", "lang": "en", "description": "CWE-201: Insertion of Sensitive Information Into Sent Data", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3"}, {"name": "https://github.com/bullfrogsec/bullfrog/commit/ae7744ae4b3a6f8ffc2e49f501e30bf1a43d4671", "tags": ["x_refsource_MISC"], "url": "https://github.com/bullfrogsec/bullfrog/commit/ae7744ae4b3a6f8ffc2e49f501e30bf1a43d4671"}, {"name": "https://github.com/bullfrogsec/bullfrog/releases/tag/v0.8.4", "tags": ["x_refsource_MISC"], "url": "https://github.com/bullfrogsec/bullfrog/releases/tag/v0.8.4"}], "affected": [{"vendor": "bullfrogsec", "product": "bullfrog", "versions": [{"version": "< 0.8.4", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-05-14T15:18:37.058Z"}, "descriptions": [{"lang": "en", "value": "Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue."}], "source": {"advisory": "GHSA-m32f-fjw2-37v3", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-05-14T15:42:37.896447Z", "id": "CVE-2025-47775", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-14T15:42:42.206Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-47775", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-14T15:42:37.896447Z"}}}], "references": [{"url": "https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-14T15:42:33.852Z"}}], "cna": {"title": "Bullfrog's DNS over TCP bypasses domain filtering", "source": {"advisory": "GHSA-m32f-fjw2-37v3", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "bullfrogsec", "product": "bullfrog", "versions": [{"status": "affected", "version": "< 0.8.4"}]}], "references": [{"url": "https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3", "name": "https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/bullfrogsec/bullfrog/commit/ae7744ae4b3a6f8ffc2e49f501e30bf1a43d4671", "name": "https://github.com/bullfrogsec/bullfrog/commit/ae7744ae4b3a6f8ffc2e49f501e30bf1a43d4671", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/bullfrogsec/bullfrog/releases/tag/v0.8.4", "name": "https://github.com/bullfrogsec/bullfrog/releases/tag/v0.8.4", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-201", "description": "CWE-201: Insertion of Sensitive Information Into Sent Data"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-05-14T15:18:37.058Z"}}}, "cveMetadata": {"cveId": "CVE-2025-47775", "state": "PUBLISHED", "dateUpdated": "2025-05-14T15:42:42.206Z", "dateReserved": "2025-05-09T19:49:35.619Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2025-05-14T15:18:37.058Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:bullfrogsec:bullfrog:*:*:*:*:*:*:*:*", "matchCriteriaId": "A655DA35-9EC0-42B2-AE07-C5CE762ADD8D", "versionEndExcluding": "0.8.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue."}, {"lang": "es", "value": "Bullfrog es una acci\u00f3n de GitHub que bloquea el tr\u00e1fico saliente no autorizado en los flujos de trabajo de GitHub. Antes de la versi\u00f3n 0.8.4, el uso de TCP interrump\u00eda el bloqueo y permit\u00eda la exfiltraci\u00f3n de DNS. Esto puede provocar la omisi\u00f3n del entorno de pruebas. La versi\u00f3n 0.8.4 soluciona este problema."}], "id": "CVE-2025-47775", "lastModified": "2025-07-11T16:15:04.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 3.6, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.0, "source": "[email protected]", "type": "Primary"}]}, "published": "2025-05-14T16:15:28.807", "references": [{"source": "[email protected]", "tags": ["Patch"], "url": "https://github.com/bullfrogsec/bullfrog/commit/ae7744ae4b3a6f8ffc2e49f501e30bf1a43d4671"}, {"source": "[email protected]", "tags": ["Release Notes"], "url": "https://github.com/bullfrogsec/bullfrog/releases/tag/v0.8.4"}, {"source": "[email protected]", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-201"}], "source": "[email protected]", "type": "Primary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "[email protected]", "type": "Primary"}]}

{}