CVE-2025-48448 - Vulnerability Details - OpenCVE

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.This issue affects Admin Audit Trail: from 0.0.0 before 1.0.5.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Admin Audit Trail Project	Admin Audit Trail

Configuration 1 [-]

cpe:2.3:a:admin_audit_trail_project:admin_audit_trail:*:*:*:*:*:drupal:*:*

No data.

References

Link	Providers
https://www.drupal.org/sa-contrib-2025-068

History

Fri, 20 Jun 2025 13:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Admin Audit Trail Project Admin Audit Trail Project admin Audit Trail
CPEs		cpe:2.3:a:admin_audit_trail_project:admin_audit_trail::::::drupal::*
Vendors & Products		Admin Audit Trail Project Admin Audit Trail Project admin Audit Trail

Wed, 11 Jun 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 11 Jun 2025 14:45:00 +0000

Type	Values Removed	Values Added
Description		Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.This issue affects Admin Audit Trail: from 0.0.0 before 1.0.5.
Title		Admin Audit Trail - Less critical - Denial of Service - SA-CONTRIB-2025-068
Weaknesses		CWE-770
References		https://www.drupal.org/sa-contrib-2025-068

MITRE

Status: PUBLISHED

Assigner: drupal

Published: 2025-06-11T14:36:15.275Z

Updated: 2025-06-11T15:45:14.796Z

Reserved: 2025-05-21T16:25:07.435Z

Link: CVE-2025-48448

Vulnrichment

Updated: 2025-06-11T15:44:25.271Z

NVD

Status : Analyzed

Published: 2025-06-11T15:15:42.733

Modified: 2025-06-20T13:06:18.167

Link: CVE-2025-48448

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-48448", "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "state": "PUBLISHED", "assignerShortName": "drupal", "dateReserved": "2025-05-21T16:25:07.435Z", "datePublished": "2025-06-11T14:36:15.275Z", "dateUpdated": "2025-06-11T15:45:14.796Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://www.drupal.org/project/admin_audit_trail", "defaultStatus": "unaffected", "product": "Admin Audit Trail", "repo": "https://git.drupalcode.org/project/admin_audit_trail", "vendor": "Drupal", "versions": [{"lessThan": "1.0.5", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Scott Phillips (scottatdrake)"}, {"lang": "en", "type": "remediation developer", "value": "Rajab Natshah (rajab natshah)"}, {"lang": "en", "type": "coordinator", "value": "Greg Knaddison (greggles)"}, {"lang": "en", "type": "coordinator", "value": "Juraj Nemec (poker10)"}], "datePublic": "2025-05-21T17:29:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.<p>This issue affects Admin Audit Trail: from 0.0.0 before 1.0.5.</p>"}], "value": "Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.This issue affects Admin Audit Trail: from 0.0.0 before 1.0.5."}], "impacts": [{"capecId": "CAPEC-130", "descriptions": [{"lang": "en", "value": "CAPEC-130 Excessive Allocation"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-770", "description": "CWE-770 Allocation of Resources Without Limits or Throttling", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "shortName": "drupal", "dateUpdated": "2025-06-11T14:36:15.275Z"}, "references": [{"url": "https://www.drupal.org/sa-contrib-2025-068"}], "source": {"discovery": "UNKNOWN"}, "title": "Admin Audit Trail - Less critical - Denial of Service - SA-CONTRIB-2025-068", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-06-11T15:43:45.278627Z", "id": "CVE-2025-48448", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-11T15:45:14.796Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-48448", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-06-11T15:43:45.278627Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-11T15:44:25.271Z"}}], "cna": {"title": "Admin Audit Trail - Less critical - Denial of Service - SA-CONTRIB-2025-068", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Scott Phillips (scottatdrake)"}, {"lang": "en", "type": "remediation developer", "value": "Rajab Natshah (rajab natshah)"}, {"lang": "en", "type": "coordinator", "value": "Greg Knaddison (greggles)"}, {"lang": "en", "type": "coordinator", "value": "Juraj Nemec (poker10)"}], "impacts": [{"capecId": "CAPEC-130", "descriptions": [{"lang": "en", "value": "CAPEC-130 Excessive Allocation"}]}], "affected": [{"repo": "https://git.drupalcode.org/project/admin_audit_trail", "vendor": "Drupal", "product": "Admin Audit Trail", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "1.0.5", "versionType": "semver"}], "collectionURL": "https://www.drupal.org/project/admin_audit_trail", "defaultStatus": "unaffected"}], "datePublic": "2025-05-21T17:29:00.000Z", "references": [{"url": "https://www.drupal.org/sa-contrib-2025-068"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.This issue affects Admin Audit Trail: from 0.0.0 before 1.0.5.", "supportingMedia": [{"type": "text/html", "value": "Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.<p>This issue affects Admin Audit Trail: from 0.0.0 before 1.0.5.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-770", "description": "CWE-770 Allocation of Resources Without Limits or Throttling"}]}], "providerMetadata": {"orgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "shortName": "drupal", "dateUpdated": "2025-06-11T14:36:15.275Z"}}}, "cveMetadata": {"cveId": "CVE-2025-48448", "state": "PUBLISHED", "dateUpdated": "2025-06-11T15:45:14.796Z", "dateReserved": "2025-05-21T16:25:07.435Z", "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387", "datePublished": "2025-06-11T14:36:15.275Z", "assignerShortName": "drupal"}, "dataVersion": "5.1"}