tocsin

Packagist/drupal/core CVE-2024-11941: unknown, EPSS 0.48%

The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS).

Action: Upgrade drupal/core to 10.1.8 or later.

composer require drupal/core:10.1.8
composer require drupal/core:10.2.2

Affected

introducedfixedlast affected
8.0.010.1.8-
10.2.010.2.2-

Fixed versions

10.1.810.2.2

Sources

CVE-2024-11941 · published · modified · JSON