6.5

CVE-2016-9452

The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Drupal ≫ Drupal Version 8.0.0
Drupal ≫ Drupal Version 8.0.0 Update alpha10
Drupal ≫ Drupal Version 8.0.0 Update alpha11
Drupal ≫ Drupal Version 8.0.0 Update alpha12
Drupal ≫ Drupal Version 8.0.0 Update alpha13
Drupal ≫ Drupal Version 8.0.0 Update alpha14
Drupal ≫ Drupal Version 8.0.0 Update alpha15
Drupal ≫ Drupal Version 8.0.0 Update alpha2
Drupal ≫ Drupal Version 8.0.0 Update alpha3
Drupal ≫ Drupal Version 8.0.0 Update alpha4
Drupal ≫ Drupal Version 8.0.0 Update alpha5
Drupal ≫ Drupal Version 8.0.0 Update alpha6
Drupal ≫ Drupal Version 8.0.0 Update alpha7
Drupal ≫ Drupal Version 8.0.0 Update alpha8
Drupal ≫ Drupal Version 8.0.0 Update alpha9
Drupal ≫ Drupal Version 8.0.0 Update beta1
Drupal ≫ Drupal Version 8.0.0 Update beta10
Drupal ≫ Drupal Version 8.0.0 Update beta11
Drupal ≫ Drupal Version 8.0.0 Update beta12
Drupal ≫ Drupal Version 8.0.0 Update beta13
Drupal ≫ Drupal Version 8.0.0 Update beta14
Drupal ≫ Drupal Version 8.0.0 Update beta15
Drupal ≫ Drupal Version 8.0.0 Update beta16
Drupal ≫ Drupal Version 8.0.0 Update beta2
Drupal ≫ Drupal Version 8.0.0 Update beta3
Drupal ≫ Drupal Version 8.0.0 Update beta4
Drupal ≫ Drupal Version 8.0.0 Update beta6
Drupal ≫ Drupal Version 8.0.0 Update beta7
Drupal ≫ Drupal Version 8.0.0 Update beta9
Drupal ≫ Drupal Version 8.0.0 Update rc1
Drupal ≫ Drupal Version 8.0.0 Update rc2
Drupal ≫ Drupal Version 8.0.0 Update rc3
Drupal ≫ Drupal Version 8.0.0 Update rc4
Drupal ≫ Drupal Version 8.0.1
Drupal ≫ Drupal Version 8.0.2
Drupal ≫ Drupal Version 8.0.3
Drupal ≫ Drupal Version 8.0.4
Drupal ≫ Drupal Version 8.0.5
Drupal ≫ Drupal Version 8.0.6
Drupal ≫ Drupal Version 8.1.0
Drupal ≫ Drupal Version 8.1.0 Update beta1
Drupal ≫ Drupal Version 8.1.0 Update beta2
Drupal ≫ Drupal Version 8.1.0 Update rc1
Drupal ≫ Drupal Version 8.1.1
Drupal ≫ Drupal Version 8.1.2
Drupal ≫ Drupal Version 8.1.3
Drupal ≫ Drupal Version 8.1.4
Drupal ≫ Drupal Version 8.1.5
Drupal ≫ Drupal Version 8.1.6
Drupal ≫ Drupal Version 8.1.7
Drupal ≫ Drupal Version 8.1.8
Drupal ≫ Drupal Version 8.1.9
Drupal ≫ Drupal Version 8.1.10
Drupal ≫ Drupal Version 8.2.0
Drupal ≫ Drupal Version 8.2.0 Update beta1
Drupal ≫ Drupal Version 8.2.0 Update beta2
Drupal ≫ Drupal Version 8.2.0 Update beta3
Drupal ≫ Drupal Version 8.2.0 Update rc1
Drupal ≫ Drupal Version 8.2.0 Update rc2
Drupal ≫ Drupal Version 8.2.1
Drupal ≫ Drupal Version 8.2.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.72% 0.745
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/94367
Third Party Advisory
VDB Entry
https://www.drupal.org/SA-CORE-2016-005
Patch
Vendor Advisory