JVN#63383723: Drupal vulnerable to improper handling of structural elements

Drupal provided by Drupal.org contains an improper handling of structural elements vulnerability (CWE-237).

Impact

An attacker may be able to cause a denial-of-service (DoS) condition.

Solution

Update the Software
Update the software to the latest version (10 series) according to the information provided by the developer.

The support for Drupal version 9 series came to an end (EOL) in November 2023.

Products Affected

• Drupal
  The reporter states that Drupal version 9.3.6 was found to be vulnerable to this issue.
  The developer states that this vulnerability was not reproduced in the version 10 series and the latest version 9.5.x of the version 9 series.