CVE-2013-4599 The Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay misery" configuration is set to a high value, allows remote attackers to cause a denial of service (proc...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay misery" configuration is set to a high value, allows remote attackers to cause a denial of service (process consumption) via multiple requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| misery project misery | = 6.x-2.0 | No fix listed |
| misery project misery | = 6.x-2.1 | No fix listed |
| misery project misery | = 6.x-2.2 | No fix listed |
| misery project misery | = 6.x-2.3 | No fix listed |
| misery project misery | = 6.x-2.4 | No fix listed |
| misery project misery | = 7.x-2.0 | No fix listed |
| misery project misery | = 7.x-2.1 | No fix listed |
References
- [oss-security] 20131118 Re: CVE request for Drupal contributed modules mailing-list
- 63705 vdb-entry
- drupal.org patch
- drupal.org patch
- drupal.org vendor-advisory