Combined Image Style
Monthly
Excessive resource allocation in the Drupal contributed Combined image style module, affecting versions 0.0.0 through 1.0.7, can let remote unauthenticated requests that depend on user interaction drive resource consumption and degrade availability (CVSS 4.3, CWE-770). Only Drupal sites with this non-core module installed and enabled are exposed, and confidentiality and integrity are unaffected. This is a low-to-moderate priority issue rather than an emergency, and no public exploit was identified at time of analysis.
Excessive resource allocation in the Drupal contributed Combined image style module, affecting versions 0.0.0 through 1.0.7, can let remote unauthenticated requests that depend on user interaction drive resource consumption and degrade availability (CVSS 4.3, CWE-770). Only Drupal sites with this non-core module installed and enabled are exposed, and confidentiality and integrity are unaffected. This is a low-to-moderate priority issue rather than an emergency, and no public exploit was identified at time of analysis.