GHSA-xq54-x54m-vcpx

Source

https://github.com/advisories/GHSA-xq54-x54m-vcpx

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/12/GHSA-xq54-x54m-vcpx/GHSA-xq54-x54m-vcpx.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-xq54-x54m-vcpx

Aliases

Published

2024-12-05T15:31:02Z

Modified

2025-12-10T23:41:20.710292Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Drupal core Denial of Service

Details

The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS).

Sites that do not use the Comment module are not affected.

Database specific

{
    "nvd_published_at": "2024-12-05T15:15:08Z",
    "severity": "HIGH",
    "github_reviewed_at": "2024-12-05T19:58:07Z",
    "cwe_ids": [
        "CWE-835"
    ],
    "github_reviewed": true
}

References

Affected packages

Packagist / drupal/core

Package

Name: drupal/core
Purl: pkg:composer/drupal/core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

10.1.0

Fixed

10.1.8

Affected versions

10.*

10.1.0

10.1.1

10.1.2

10.1.3

10.1.4

10.1.5

10.1.6

10.1.7

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/12/GHSA-xq54-x54m-vcpx/GHSA-xq54-x54m-vcpx.json"