GHSA-xq54-x54m-vcpxHighCVSS 7.5

Drupal core Denial of Service

Published
December 5, 2024
Last Modified
December 5, 2024

🔗 CVE IDs covered (1)

📋 Description

The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS).

Sites that do not use the Comment module are not affected.

🎯 Affected products2

  • composer/drupal/core:>= 10.1.0, < 10.1.8
  • composer/drupal/core:>= 10.2.0, < 10.2.2

🔗 References (3)