high7.5
CVE-2024-11941
Drupal core Denial of Service
Impact
The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS). Sites that do not use the Comment module are not affected.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | drupal/core | >= 10.1.0, < 10.1.8 | 10.1.8 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Drupal | from 8.0.0 before 10.1.8 from 10.2.0 before 10.2.2 |