GHSA-pr99-c33p-fwf6
Drupal core Denial of Service
At a glance
- Published
- Updated
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Description
A visit to install.php can cause cached data to become corrupted. This could cause a site to be impaired until caches are rebuilt.
Affected packages
| Package | Versions |
|---|---|
| Packagist · drupal/core | introduced 8.0.0, fixed 8.7.11 |
| Packagist · drupal/core | introduced 8.8.0, fixed 8.8.1 |
References
- https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2019-12-18-1.yaml WEB
- https://github.com/drupal/core PACKAGE
- https://www.drupal.org/sa-core-2019-009 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |