CVE-2025-4416
Events Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059
Résumé
Events Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocation.This issue affects Events Log Track: from 0.0.0 before 3.1.11, from 4.0.0 before 4.0.2.
Paquets affectés
Packagist:https://packages.drupal.org/8
drupal/events_log_track
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.11"}],"database_specific":{"constraint":"<3.1.11"}},{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.0.2"}],"database_specific":{"constraint":">=4.0.0 <4.0.2"}}]
Références
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org