CVE-2025-47775CWE-201

Bullfrog's DNS over TCP bypasses domain filtering

Medium · published May 14, 2025

CVSS v3.1
6.2
EPSS
0%
Percentile
41.5
In the wild
Unconfirmed
What it is

Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00494 · 41.5th percentile
Weakness
CWE-201 · Insertion of Sensitive Information Into Sent Data
Published
2025-05-14T15:18Z
EPSS history
Timeline
  • 14 MAY 15:18Z
    Bullfrog's DNS over TCP bypasses domain filtering
    cvelistv5