Unscored CVE-2012-5704 EUVD-2012-5587GHSA-w9pp-6v27-ph4c

The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to caus…

Published Nov 1, 2012 · Updated Sep 16, 2024 · Assigned by mitre

Description

The Hotblocks module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with the "administer hotblocks" permission to cause a denial of service (infinite loop and time out) via a block that references itself.

References

[oss-security] 20121004 CVE Request for Drupal Contributed Modules mailing-list
http://drupal.org/node/1732828
http://www.madirish.net/543
http://drupal.org/node/1732946
[oss-security] 20121007 Re: CVE Request for Drupal Contributed Modules mailing-list