Cloudanix VulnDB

CVE-2025-55128

Medium · 6.5

CVSS

6.5

EPSS

0.4%

Published

Nov 20, 2025

CISA due date

—

The record

HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumption vulnerability in the “userlog-index.php”. An attacker with access to the admin interface could request an arbitrarily large number of items per page, potentially leading to a denial of service.

Affected packages

Ecosystem Package Introduced Fixed