Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay misery" configuration is set to a high value, allows remote attackers to cause a denial of service (process consumption) via multiple requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal Misery模块拒绝服务漏洞
Vulnerability Description
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。Misery是其中的一个用于惩罚恶意用户的模块,它提供了随机增加延迟时间长度、403访问拒绝、404错误页面等功能。 Drupal Misery模块6.x-2.5之前的6.x-2.x版本和7.x-2.2之前的7.x-2.x版本中存在安全漏洞。远程攻击者可通过发送多个请求利用该漏洞造成拒绝服务(进程崩溃)。
CVSS Information
N/A
Vulnerability Type
N/A