@plone/volto vulnerable to potential DoS by invoking specific URL by anonymous user

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-61668 · Microsoft / collected KEV context

EUVD-2025-32508

GHSA-m8rj-ppph-mj33

cve-program · CVE-2025-61668

• https://github.com/plone/volto/security/advisories/GHSA-m8rj-ppph-mj33
• https://github.com/plone/volto/pull/7412
• https://github.com/plone/volto/pull/7413
• https://github.com/plone/volto/commit/58d9f82d2d50ca9a87edbe16fed91762e57c109c
• https://github.com/plone/volto/releases/tag/16.34.1
• https://github.com/plone/volto/releases/tag/17.22.2
• https://github.com/plone/volto/releases/tag/19.0.0-alpha.6
• http://github.com/plone/volto/releases/tag/18.27.2

euvd · EUVD-2025-32508

• https://github.com/plone/volto/security/advisories/GHSA-m8rj-ppph-mj33
• https://github.com/plone/volto/pull/7412
• https://github.com/plone/volto/pull/7413
• https://github.com/plone/volto/commit/58d9f82d2d50ca9a87edbe16fed91762e57c109c
• https://github.com/plone/volto/releases/tag/16.34.1
• https://github.com/plone/volto/releases/tag/17.22.2
• https://github.com/plone/volto/releases/tag/19.0.0-alpha.6
• http://github.com/plone/volto/releases/tag/18.27.2

nvd · CVE-2025-61668

• http://github.com/plone/volto/releases/tag/18.27.2
• https://github.com/plone/volto/commit/58d9f82d2d50ca9a87edbe16fed91762e57c109c
• https://github.com/plone/volto/pull/7412
• https://github.com/plone/volto/pull/7413
• https://github.com/plone/volto/releases/tag/16.34.1
• https://github.com/plone/volto/releases/tag/17.22.2
• https://github.com/plone/volto/releases/tag/19.0.0-alpha.6
• https://github.com/plone/volto/security/advisories/GHSA-m8rj-ppph-mj33

osv · GHSA-m8rj-ppph-mj33

• https://github.com/plone/volto/security/advisories/GHSA-m8rj-ppph-mj33
• https://nvd.nist.gov/vuln/detail/CVE-2025-61668
• https://github.com/plone/volto/pull/7412
• https://github.com/plone/volto/pull/7413
• https://github.com/plone/volto/commit/58d9f82d2d50ca9a87edbe16fed91762e57c109c
• https://github.com/plone/volto
• https://github.com/plone/volto/releases/tag/16.34.1
• https://github.com/plone/volto/releases/tag/17.22.2
• https://github.com/plone/volto/releases/tag/19.0.0-alpha.6
• http://github.com/plone/volto/releases/tag/18.27.2

No related operational record is retained in the current change model.