Vulnerability advisory
GHSA-xq54-x54m-vcpx
Drupal core Denial of Service
Also known as BIT-drupal-2024-11941CVE-2024-11941DRUPAL-CORE-2024-001
Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected versions
drupal/core Packagist
All drupal/core advisories →| Affected | Fixed in |
|---|---|
10.1.0 to before 10.1.8 | 10.1.8Advisories → |
10.2.0 to before 10.2.2 | 10.2.2Advisories → |
Description
The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS).
Sites that do not use the Comment module are not affected.