CVE-2024-11941

Drupal core - Moderately critical - Denial of Service - SA-CORE-2024-001

A vulnerability in Drupal Core allows Excessive Allocation.This issue affects Drupal Core: from 10.2.0 before 10.2.2, from 10.1.0 before 10.1.8.

We have discovered 1,011 live websites that are affected by CVE-2024-11941.

Run a Free Instant Scan



Affected Software

Product  Drupal
Category Content Management System
Vulnerable Domains1,011 live websites (0.51% of Drupal install base)
Vulnerable Versions
  • from 10.1 through 10.1.8
  • from 10.2 through 10.2.2
Vulnerable Versions Count10 versions ( 2.87% of all versions)


Common Weakness Enumeration

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')



Details

  • Published - Dec 5, 2024
  • Updated - Dec 5, 2024

Credits

  • Alexander Antonenko (finder)
  • Doug Green (finder)
  • Lee Rowlands (remediation developer)
  • Benji Fisher (remediation developer)
  • Juraj Nemec (remediation developer)
  • xjm (remediation developer)
  • Lauri Eskola (remediation developer)

Website Distribution by Country

Number of websites using CVE-2024-11941
United States613 websites


Hong Kong41 websites
Germany39 websites
France29 websites
Belgium28 websites
Spain22 websites
Netherlands21 websites
Russia21 websites
Italy20 websites
GB18 websites

Website Distribution by TLD

Number of websites using CVE-2024-11941
.com650 websites
.org32 websites
.de31 websites
.be24 websites
.fr19 websites
.nl18 websites
.net18 websites
.ru18 websites
.it14 websites
.pl11 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2024-11941

Top websites that are affected by CVE-2024-11941. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
***.gov United States**,***
*****.gov United States***,***
******.org United States***,***
*****.org United States***,***
*********.com United States***,***
********.com Italy***,***
****************.****.fr France***,***
****.****.fr France***,***
****.org United States***,***
**********.org Netherlands***,***
See full domain list

FAQ

CVE-2024-11941 is Loop with Unreachable Exit Condition ('Infinite Loop') in Drupal
A total of 1,011 websites have been identified as vulnerable to CVE-2024-11941, based on global website indexing conducted by WebTechSurvey.
The Drupal is affected by the CVE-2024-11941 vulnerability.
Drupal versions up to 10.2.2 are vulnerable to CVE-2024-11941.
CVE-2024-11941 is resolved in version 10.2.2 of Drupal.