CVE-2025-4416
The Events Log Track module enables you to log specific events on a Drupal site. The module doesn't sufficiently mitigate resource consumption for ce...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
The Events Log Track module enables you to log specific events on a Drupal site.
The module doesn't sufficiently mitigate resource consumption for certain requests which allows a Denial of Service attack.
影響パッケージ
Packagist:https://packages.drupal.org/8
drupal/events_log_track
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.11"}],"database_specific":{"constraint":"<3.1.11"}},{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.0.2"}],"database_specific":{"constraint":">=4.0.0 <4.0.2"}}]
参照URL
- web drupal.org