CVE-2012-5704

2022-10-0316:15:31

mitre

www.cve.org

drupal

hotblocks module

denial of service

6.2 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.8%

JSON

The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the “administer hotblocks” permission to cause a denial of service (infinite loop and time out) via a block that references itself.

References

drupal.org/node/1732828

drupal.org/node/1732946

www.madirish.net/543

www.openwall.com/lists/oss-security/2012/10/04/6

www.openwall.com/lists/oss-security/2012/10/07/1