← Back

CVE-2016-9452

nvd nist
Published: Nov 25, 2016Modified: May 6, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL.

Affected (61)

Products: Drupal: Drupal
Drupal
1 product
Drupal
Configuration A
61 vulnerable
Vulnerable SoftwareAffected Versions
Drupal
Drupal
Version 8.0.0
Drupal
Version 8.0.0 alpha10
Drupal
Version 8.0.0 alpha11
Drupal
Version 8.0.0 alpha12
Drupal
Version 8.0.0 alpha13
Drupal
Version 8.0.0 alpha14
Drupal
Version 8.0.0 alpha15
Drupal
Version 8.0.0 alpha2
Drupal
Version 8.0.0 alpha3
Drupal
Version 8.0.0 alpha4
Drupal
Version 8.0.0 alpha5
Drupal
Version 8.0.0 alpha6
Drupal
Version 8.0.0 alpha7
Drupal
Version 8.0.0 alpha8
Drupal
Version 8.0.0 alpha9
Drupal
Version 8.0.0 beta10
Drupal
Version 8.0.0 beta11
Drupal
Version 8.0.0 beta12
Drupal
Version 8.0.0 beta13
Drupal
Version 8.0.0 beta14
Drupal
Version 8.0.0 beta15
Drupal
Version 8.0.0 beta16
Drupal
Version 8.0.0 beta1
Drupal
Version 8.0.0 beta2
Drupal
Version 8.0.0 beta3
Drupal
Version 8.0.0 beta4
Drupal
Version 8.0.0 beta6
Drupal
Version 8.0.0 beta7
Drupal
Version 8.0.0 beta9
Drupal
Version 8.0.0 rc1
Drupal
Version 8.0.0 rc2
Drupal
Version 8.0.0 rc3
Drupal
Version 8.0.0 rc4
Drupal
Version 8.0.1
Drupal
Version 8.0.2
Drupal
Version 8.0.3
Drupal
Version 8.0.4
Drupal
Version 8.0.5
Drupal
Version 8.0.6
Drupal
Version 8.1.0
Drupal
Version 8.1.0 beta1
Drupal
Version 8.1.0 beta2
Drupal
Version 8.1.0 rc1
Drupal
Version 8.1.10
Drupal
Version 8.1.1
Drupal
Version 8.1.2
Drupal
Version 8.1.3
Drupal
Version 8.1.4
Drupal
Version 8.1.5
Drupal
Version 8.1.6
Drupal
Version 8.1.7
Drupal
Version 8.1.8
Drupal
Version 8.1.9
Drupal
Version 8.2.0
Drupal
Version 8.2.0 beta1
Drupal
Version 8.2.0 beta2
Drupal
Version 8.2.0 beta3
Drupal
Version 8.2.0 rc1
Drupal
Version 8.2.0 rc2
Drupal
Version 8.2.1
Drupal
Version 8.2.2

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.