Vulnerability in Drupal

CVE-2007-0124

Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated users to cause a denial of service by poisoning the page cache via unspecified vectors, which triggers erroneous 404 HTTP errors for pages that exist.

EPSS: 0.012 (65.8th percentile) — read the EPSS interpretation.

Affected products

  • Drupal — versions 4.6, 4.6.0, 4.6.1
  • N/a — versions n/a

References