CVE-2025-4215

Katalog CVE

CVSS 3.7 · Low EPSS 0,79%

Kerentanan Uncontrolled Resource Consumption pada ublockorigin ublock origin, debian linux. Skor CVSS 3.1 3.7 (Low) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in gorhill uBlock Origin up to 1.63.3b16. It has been classified as problematic. Affected is the function currentStateChanged of the file src/js/1p-filters.js of the component UI. The manipulation leads to inefficient regular expression complexity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.63.3b17 is able to address this issue. The patch is identified as eaedaf5b10d2f7857c6b77fbf7d4a80681d4d46c. It is recommended to upgrade the affected component.

Rincian

Terbit di NVD

2 Mei 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

3.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-1333: Inefficient Regular Expression Complexity

EPSS (30 hari)

0,79% peluang dieksploitasi; lebih tinggi dari 55,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/gorhill/uBlock/commit/eaedaf5b10d2f7857c6b77fbf7d4a80681d4d46c exploit · patch
• https://vuldb.com/?id.307194 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.562301 advisory pihak ketiga · vdb entry
• https://github.com/gorhill/uBlock/releases/tag/1.63.3b17 release notes
• https://vuldb.com/?ctiid.307194 permissions required · vdb entry
• https://lists.debian.org/debian-lts-announce/2025/06/msg00013.html mailing list