15776 matches found
PT-2024-10360 · Drupal · Open Social
Name of the Vulnerable Software and Affected Versions: Open Social versions 0.0.0 through 12.0.4 Description: The issue is related to improper authorization in Drupal Open Social, allowing the collection of data from common resource locations. This can potentially lead to unauthorized access to...
Swift Mailer (abandoned) - Moderately critical - Access bypass - SA-CONTRIB-2024-006
The Drupal Swift Mailer module extends the basic e-mail sending functionality provided by Drupal by delegating all e-mail handling to the Swift Mailer library. This enables your site to take advantage of the many features which the Swift Mailer library provides. The module could allow an attacker...
Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004
Content within Open Social can have different visibilities. It is possible for a user to create public content even when this should not be allowed. This vulnerability is mitigated by the fact that the site must have public visibility disabled on a global level...
Two-factor Authentication (TFA) - Moderately critical - Access bypass - SA-CONTRIB-2024-003
This module enables you to allow and/or require users to use a second authentication method in addition to password authentication. In some cases, the module allows users to log in with an authentication plugin that an administrator has disabled. This vulnerability is mitigated by the fact that a...
Drupal 10.1.x < 10.1.8 Denial of Service
According to its self-reported version, the instance of Drupal running on the remote web server is 10.1.x prior to 10.1.8 or 10.2.x prior to 10.2.2. The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of...
Drupal < 9.5.11 / 10.0 DoS
According to its self-reported version, the instance of Drupal running on the remote web server is potentially vulnerable to a denial of service vulnerability due to improper handling of structural elements. This vulnerability has been reported against 9.x versions of Drupal. The Drupal maintaine...
Drupal 10.2.x < 10.2.2 Denial of Service
According to its self-reported version, the instance of Drupal running on the remote web server is 10.1.x prior to 10.1.8 or 10.2.x prior to 10.2.2. The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of...
Drupal Releases Security Advisory for Drupal Core
Drupal released a security advisory to address a vulnerability affecting multiple Drupal core versions. A cyber threat actor could exploit this vulnerability to cause a denial-of-service condition. CISA encourages users and administrators to review Drupal security advisory SA-CORE-2024-001link is...
DRUPAL-CORE-2024-001
The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service DOS. Sites that do not use the Comment module are not affected...
Denial Of Service (DoS)
Drupal is vulnerable to Denial of Service DoS. The vulnerability is caused due to improper handling of structural elements, which can result in Denial of Service...
Drupal core - Moderately critical - Denial of Service - SA-CORE-2024-001
The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service DOS. Sites that do not use the Comment module are not affected...
Drupal 10.1.x < 10.1.8 / 10.2.x < 10.2.2 Drupal Vulnerability (SA-CORE-2024-001)
According to its self-reported version, the instance of Drupal running on the remote web server is 10.1.x prior to 10.1.8 or 10.2.x prior to 10.2.2. It is, therefore, affected by a vulnerability. - The Comment module allows users to reply to comments. In certain cases, an attacker could make...
PT-2024-9530 · Drupal · Drupal Core
Name of the Vulnerable Software and Affected Versions: Drupal Core versions 10.2.0 through 10.2.1 Drupal Core versions 10.1.0 through 10.1.7 Description: A vulnerability in Drupal Core allows Excessive Allocation, which can be exploited to trigger a denial of service DOS. The issue affects certai...
Drupal Denial of Service vulnerability
Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...
GHSA-62CF-JVPP-48Q6 Drupal Denial of Service vulnerability
Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...
Drupal vulnerable to improper handling of structural elements
Overview Drupal provided by Drupal.org contains an improper handling of structural elements vulnerability CWE-237. Shiga Takuma of BroadBand Security Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...
CVE-2024-22362
Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...
UBUNTU-CVE-2024-22362
Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...
Design/Logic Flaw
Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service DoS condition...
