4.3

CVE-2013-4599

The Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay misery" configuration is set to a high value, allows remote attackers to cause a denial of service (process consumption) via multiple requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Misery Project ≫ Misery Version6.x-2.0 Update- Edition- SwEdition- SwPlatformdrupal
Misery Project ≫ Misery Version6.x-2.1 Update- Edition- SwEdition- SwPlatformdrupal
Misery Project ≫ Misery Version6.x-2.2 Update- Edition- SwEdition- SwPlatformdrupal
Misery Project ≫ Misery Version6.x-2.3 Update- Edition- SwEdition- SwPlatformdrupal
Misery Project ≫ Misery Version6.x-2.4 Update- Edition- SwEdition- SwPlatformdrupal
Misery Project ≫ Misery Version7.x-2.0 Update- Edition- SwEdition- SwPlatformdrupal
Misery Project ≫ Misery Version7.x-2.1 Update- Edition- SwEdition- SwPlatformdrupal
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.34% 0.675
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://seclists.org/oss-sec/2013/q4/317
http://www.securityfocus.com/bid/63705
https://drupal.org/node/2134409
Patch
https://drupal.org/node/2134413
Patch
https://drupal.org/node/2135273
Vendor Advisory