CVE-2016-9452

MEDIUM

Drupal < 8.2.3 - Improper Input Validation

Title source: rule

The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL.

CVSS v3 6.5

EPSS 0.0038

EPSS Percentile 59.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-20

Status published

drupal/drupal

... and 35 more

Published Nov 25, 2016

Tracked Since Feb 18, 2026