CVE-2025-3734

CVE-2025-3734: Stage File Proxy - Moderately critical - Denial of Service - SA-CONTRIB-2025-035

Vendor Drupal

Product Stage File Proxy

Weakness CWE-770 · Uncontrolled resource consumption

Published April 16, 2025

Last update April 16, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Allocation of Resources Without Limits or Throttling vulnerability in Drupal Stage File Proxy allows Flooding.This issue affects Stage File Proxy: from 0.0.0 before 3.1.5.

Key dates

02Disclosure timeline

April 16, 2025 CVE published

April 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-3734 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/770.html AskarLabs — CWE-770 write-up Allocation of Resources Without Limits or Throttling

Related vulnerabilities

04Related CVE

CVE-2026-81285 WordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerability CVE-2025-4416 Events Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059 CVE-2025-3475 WEB-T - Moderately critical - Access bypass, Denial of service - SA-CONTRIB-2025-030 CVE-2025-48448 Admin Audit Trail - Less critical - Denial of Service - SA-CONTRIB-2025-068