-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| drupal/core | composer | >= 10.1.0, < 10.1.8 | 10.1.8 |
| drupal/core | composer | >= 10.2.0, < 10.2.2 | 10.2.2 |
PHPPHPMiggo AIRoot Cause AnalysisThe vulnerability involves comment reply handling leading to infinite loops (CWE-835). The Comment module's core functionality for thread loading (CommentStorage) and parent comment resolution (CommentManager) are prime candidates. These components process() hierarchical relationships between comments and would require proper cycle detection/depth limits to prevent DoS. While exact patch details are unavailable, the described attack vector and Drupal's architecture suggest these functions are involved in the vulnerable comment traversal logic.
Ongoing coverage of React2Shell