Описание
The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to cause a denial of service (infinite loop and time out) via a block that references itself.
Ссылки
- Patch
- PatchVendor Advisory
- Exploit
- Patch
- PatchVendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одновременно
Одно из
cpe:2.3:a:justin_dodge:hotblocks:6.x-1.5:*:*:*:*:*:*:*
cpe:2.3:a:justin_dodge:hotblocks:6.x-1.6:*:*:*:*:*:*:*
cpe:2.3:a:justin_dodge:hotblocks:6.x-1.7:*:*:*:*:*:*:*
cpe:2.3:a:justin_dodge:hotblocks:6.x-1.x:dev:*:*:*:*:*:*
cpe:2.3:a:drupal:drupal:-:*:*:*:*:*:*:*
EPSS
Процентиль: 68%
0.00591
Низкий
3.5 Low
CVSS2
Дефекты
CWE-399
Связанные уязвимости
github
около 3 лет назад
The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to cause a denial of service (infinite loop and time out) via a block that references itself.
EPSS
Процентиль: 68%
0.00591
Низкий
3.5 Low
CVSS2
Дефекты
CWE-399