Drupal up to 9.4.3 Structural Element denial of service

Summaryinfo

A vulnerability was found in Drupal. It has been classified as problematic. The affected element is an unknown function of the component Structural Element Handler. Performing a manipulation results in denial of service. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability was named CVE-2024-22362. There is no available exploit. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Drupal (Content Management System). It has been classified as problematic. This affects an unknown code block of the component Structural Element Handler. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability. The summary by CVE is:

Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service (DoS) condition.

The weakness was presented 01/16/2024. This vulnerability is uniquely identified as CVE-2024-22362 since 01/09/2024. Neither technical details nor an exploit are publicly available.

Upgrading to version 9.5.0 eliminates this vulnerability. The upgrade is hosted for download at drupal.org.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2024-0265). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Content Management System

Name

• Drupal

Version

• 1.0
• 1.7
• 1.53
• 3.0
• 3.1
• 3.2
• 4.0
• 4.0.0
• 4.1
• 4.1.0
• 4.2
• 4.2.0 Rc
• 4.3
• 4.4.0
• 4.4.1
• 4.4.2
• 4.4.3
• 4.5
• 4.5.0
• 4.5.1
• 4.5.2
• 4.5.3
• 4.5.4
• 4.5.5
• 4.5.6
• 4.5.7
• 4.5.8
• 4.6
• 4.6.0
• 4.6.1
• 4.6.2
• 4.6.3
• 4.6.4
• 4.6.5
• 4.6.6
• 4.6.7
• 4.6.8
• 4.6.9
• 4.6.10
• 4.6.11
• 4.7
• 4.7 Rev1.15
• 4.7.-1.0
• 4.7.0
• 4.7.1
• 4.7.2
• 4.7.3
• 4.7.4
• 4.7.5
• 4.7.6
• 4.7.7
• 4.7.8
• 4.7.x-1.3
• 4.7_2.2
• 4.7_rev1.15
• 5
• 5.0
• 5.1
• 5.1 Rev1.1
• 5.1_rev1.1
• 5.2
• 5.3
• 5.4
• 5.5
• 5.6
• 5.7
• 5.8
• 5.9
• 5.10
• 5.11
• 5.12
• 5.13
• 5.14
• 5.15
• 5.16
• 5.17
• 5.18
• 5.19
• 5.20
• 5.21
• 5.22
• 5.23
• 5.x-1.11
• 6
• 6.0
• 6.1
• 6.2
• 6.3
• 6.4
• 6.5
• 6.6
• 6.7
• 6.8
• 6.9
• 6.10
• 6.11
• 6.12
• 6.13
• 6.14
• 6.15
• 6.16
• 6.17
• 6.18
• 6.19
• 6.20
• 6.21
• 6.22
• 6.23
• 6.24
• 6.25
• 6.26
• 6.27
• 6.28
• 6.29
• 6.30
• 6.31
• 6.32
• 6.33
• 6.34
• 6.35
• 6.36
• 6.37
• 6.38
• 6.x-0.13
• 6.x-1.0
• 6.x-1.20
• 6.x-3.2
• 6.x-3.18
• 7
• 7.0
• 7.01
• 7.02
• 7.03
• 7.04
• 7.05
• 7.06
• 7.07
• 7.08
• 7.09
• 7.1
• 7.2
• 7.3
• 7.4
• 7.5
• 7.6
• 7.7
• 7.8
• 7.9
• 7.10
• 7.11
• 7.12
• 7.13
• 7.14
• 7.15
• 7.16
• 7.17
• 7.18
• 7.19
• 7.20
• 7.21
• 7.22
• 7.23
• 7.24
• 7.25
• 7.26
• 7.27
• 7.28
• 7.29
• 7.30
• 7.31
• 7.32
• 7.33
• 7.34
• 7.35
• 7.37
• 7.38
• 7.39
• 7.41
• 7.42
• 7.43
• 7.44
• 7.52
• 7.56
• 7.57
• 7.58
• 7.62
• 7.65
• 7.74
• 7.80
• 7.x-1.0
• 7.x-1.1
• 7.x-1.2
• 7.x-1.4
• 7.x-2.0
• 7.x-3.0
• 7.x-3.14
• 7.x-dev
• 8
• 8.0.3
• 8.0.4
• 8.1.2
• 8.1.3
• 8.1.10
• 8.2.2
• 8.2.3
• 8.2.7
• 8.2.8
• 8.3.0
• 8.3.1
• 8.3.3
• 8.3.4
• 8.3.8
• 8.3.9
• 8.4.4
• 8.4.5
• 8.4.6
• 8.5.0
• 8.5.1
• 8.5.8
• 8.5.9
• 8.5.10-fpm-alpine
• 8.5.11
• 8.5.13
• 8.5.14
• 8.6.5
• 8.6.6
• 8.6.9
• 8.6.10
• 8.6.12
• 8.6.13
• 8.7.4
• 8.7.5
• 8.8.8
• 8.8.10
• 8.8.11
• 8.9.0
• 8.9.1
• 8.9.5
• 8.9.6
• 8.9.8
• 8.9.9
• 8.9.13
• 8.9.14
• 8.9.19
• 8.30
• 8.31.0
• 8.31.1
• 9.0.0
• 9.0.1
• 9.0.5
• 9.0.6
• 9.0.7
• 9.0.8
• 9.0.11
• 9.0.12
• 9.1.6
• 9.1.7
• 9.1.12
• 9.1.13
• 9.2.5
• 9.2.6
• 9.3
• 9.3.18
• 9.3.19
• 9.4.2
• 9.4.3

License

• open-source

Support

• end of life

Website

• Product: https://www.drupal.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion