Code injection

2013-08-2822:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.7%

JSON

The Login Security module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal, when using the login delay option, allows remote attackers to cause a denial of service (CPU consumption) via a large number of failed login attempts.

CPENameOperatorVersion
login_securityeq6.x-1.0 rc1
login_securityeq6.x-1.0 beta1
login_securityeq6.120.10
login_securityeq6.120.11
login_securityeq6.120.12
login_securityeq6.120.13
login_securityeq6.x-1.x dev
login_securityeq7.120.10
login_securityeq7.120.11
login_securityeq7.120.12

Name	Operator	Version
login_security	eq	6.x-1.0 rc1
login_security	eq	6.x-1.0 beta1
login_security	eq	6.120.10
login_security	eq	6.120.11
login_security	eq	6.120.12
login_security	eq	6.120.13
login_security	eq	6.x-1.x dev
login_security	eq	7.120.10
login_security	eq	7.120.11
login_security	eq	7.120.12