CVE-2025-55128
Medium · 6.5CVSS
6.5
EPSS
0.4%
Published
Nov 20, 2025
CISA due date
—
The record
HackerOne community member Dang Hung Vi (vidang04) has reported an uncontrolled resource consumption vulnerability in the “userlog-index.php”. An attacker with access to the admin interface could request an arbitrarily large number of items per page, potentially leading to a denial of service.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|