← voltar
CVE-2025-47775

Bullfrog's DNS over TCP bypasses domain filtering

CVSS 6.2 MEDIUMEPSS 0.4%CWE-201
Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
bullfrogsec · bullfrog

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/bullfrogsec/bullfrog/commit/ae7744ae4b3a6f8ffc2e49f501e30bf1a43d4671https://github.com/bullfrogsec/bullfrog/releases/tag/v0.8.4https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3