Description
The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | drupal/core | >= 8.0, < 8.2.3 | 8.2.3 | GHSA-jpj8-49hr-wcwv |
| Packagist | drupal/drupal | >= 8.0, < 8.2.3 | 8.2.3 | GHSA-jpj8-49hr-wcwv |
References
- 94367 vdb-entry
- https://www.drupal.org/SA-CORE-2016-005