PT-2024-40121 · Unknown · Comment Module

Published 2024-02-12 · Updated 2024-02-12

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Comment module (affected versions not specified)

Description: The issue allows an attacker to trigger a denial of service (DOS) by making comment reply requests under certain conditions. Sites not using the Comment module are not affected.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-6CCV-8FGF-CJPW

Affected Products

Comment Module

References · 6

• https://osv.dev/vulnerability/GHSA-6ccv-8fgf-cjpw · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2024-01-17.yaml · Note
• https://github.com/drupal/core · Note
• https://github.com/drupal/core/commit/5e606b560ac4ecb08135f12b6165bbe0348346a0 · Note
• https://github.com/drupal/core/commit/2f76ac716ca8019bc60579fdfc8aa6cd65d57dff · Note
• https://drupal.org/sa-core-2024-001 · Note