CVE-2024-11941
2 advisories.
Packagist/drupal/core CVE-2024-11941: unknown
The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS).
Action: Upgrade drupal/core to 10.1.8 or later.
composer require drupal/core:10.1.8composer require drupal/core:10.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 10.1.8 | - |
| 10.2.0 | 10.2.2 | - |
Fixed versions
| 10.1.8 | 10.2.2 |
Sources
CVE-2024-11941 · published · modified · JSON
Packagist/drupal/core CVE-2024-11941: high 7.5
Drupal core Denial of Service
Action: Upgrade drupal/core to 10.1.8 or later.
composer require drupal/core:10.1.8composer require drupal/core:10.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.1.0 | 10.1.8 | - |
| 10.2.0 | 10.2.2 | - |
Fixed versions
| 10.1.8 | 10.2.2 |
Sources
- osv: GHSA-xq54-x54m-vcpx
- https://nvd.nist.gov/vuln/detail/CVE-2024-11941
- https://github.com/drupal/core
- https://www.drupal.org/sa-core-2024-001
CVE-2024-11941 · published · modified · JSON