CVE-2024-13275
Security Kit - Less critical - Denial of Service - SA-CONTRIB-2024-039
Résumé
Security Kit - Less critical - Denial of Service - SA-CONTRIB-2024-039
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Access of Resource Using Incompatible Type ('Type Confusion') vulnerability in Drupal Security Kit allows HTTP DoS.This issue affects Security Kit: from 0.0.0 before 2.0.3.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/seckit
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.3"}],"database_specific":{"constraint":"<2.0.3"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org