PT-2025-22386 · Drupal · Events Log Track

Greg Knaddison + 3 · Published 2025-05-21 · Updated 2025-06-25 · CVE-2025-4416

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Events Log Track versions 0.0.0 through 3.1.10 Events Log Track versions 4.0.0 through 4.0.1

Description The issue is related to the allocation of resources without limits or throttling in Drupal Events Log Track, allowing excessive allocation.

Recommendations For Events Log Track versions 0.0.0 through 3.1.10, update to version 3.1.11 or later. For Events Log Track versions 4.0.0 through 4.0.1, update to version 4.0.2 or later.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-4416

DRUPAL-CONTRIB-2025-059

Affected Products

Events Log Track

References · 6

• https://drupal.org/sa-contrib-2025-059 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-4416 · Security Note
• https://osv.dev/vulnerability/CVE-2025-4416 · Vendor Advisory
• https://twitter.com/CVEnew/status/1925232467708953029 · Twitter Post
• https://t.me/cvenotify/126636 · Telegram Post
• https://twitter.com/dailycve/status/1937928402524123592 · Twitter Post