First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-48448

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Admin Audit Trail allows Excessive Allocation.This issue affects Admin Audit Trail: from 0.0.0 before 1.0.5.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Drupal	Admin Audit Trail	>= 0.0.0, < 1.0.5

References

https://www.drupal.org/sa-contrib-2025-068Vendor Advisory

Timeline

Published: Jun 11, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-48459.8A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functi CVE-2025-484595.3Deserialization of Untrusted Data vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 2.0.5. Users are recom CVE-2025-48469.8A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component MPUT CVE-2025-484615.0Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as CVE-2025-484624.2Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from loggi CVE-2025-484633.1Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as CVE-2025-484644.7Successful exploitation of the vulnerability could allow an unauthenticated attacker to gain access to a victim’s Sync account data such as CVE-2025-484668.1Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digita CVE-2025-484676.5Successful exploitation of the vulnerability could allow an attacker to cause repeated reboots, potentially leading to remote denial-of-serv CVE-2025-484686.4Successful exploitation of the vulnerability could allow an attacker that has physical access to interface with JTAG to inject or modify fir CVE-2025-484699.6Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload firmware through a public update page, potent CVE-2025-48479.8A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the compon

CVE-2025-48448: Medium severity, CVSS 6.5 | Vulnix