GHSA-xq54-x54m-vcpx
Drupal core Denial of Service
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | drupal/core | >= 10.1.0, < 10.1.8 | 10.1.8 |
| Packagist | drupal/core | >= 10.2.0, < 10.2.2 | 10.2.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
The Comment module allows users to reply to comments. In certain cases, an attacker could make comment reply requests that would trigger a denial of service (DOS).
Sites that do not use the Comment module are not affected.
References
External links from the advisory. They lead to third-party sites.