drupal/core · Security
Drupal core Denial of Service vulnerability
- GHSA ID
- GHSA-6ccv-8fgf-cjpw
- Severity
- medium
- Published
- Updated
Description
The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS).
Sites that do not use the Comment module are not affected.
References
- https://github.com/drupal/core/commit/2f76ac716ca8019bc60579fdfc8aa6cd65d57dff ↗
- https://github.com/drupal/core/commit/5e606b560ac4ecb08135f12b6165bbe0348346a0 ↗
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2024-01-17.yaml ↗
- https://www.drupal.org/sa-core-2024-001 ↗
- https://github.com/advisories/GHSA-6ccv-8fgf-cjpw ↗