DRUPAL-CORE-2024-001

At a glance

Published: 2024-01-17 17:04 UTC
Updated: 2026-09-19 14:45 UTC
CVE: CVE-2024-11941
Aliases: BIT-drupal-2024-11941, GHSA-xq54-x54m-vcpx

Description

The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS). Sites that do not use the Comment module are not affected.

Affected packages

Package	Versions
Packagist · drupal/core	introduced 8.0.0, fixed 10.1.8 ; introduced 10.2.0, fixed 10.2.2

References

https://www.drupal.org/sa-core-2024-001 WEB

Sources

Source	Licence
OSV.dev	See osv.dev/data for this database's licence