CVE-2025-4416
CVE-2025-4416 · Events Log Track - Moderately critical - Denial of Service - SA-CONTRIB-2025-059
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Allocation of Resources Without Limits or Throttling vulnerability in Drupal Events Log Track allows Excessive Allocation.This issue affects Events Log Track: from 0.0.0 before 3.1.11, from 4.0.0 before 4.0.2.
CVSS 7.5 · High · EPSS 0.4% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
events log track
- Versions
- ≥ 0.0.0, < 3.1.11: Affected (semver)
- ≥ 4.0.0, < 4.0.2: Affected (semver)
Update to 3.1.11; Update to 4.0.2
drupal/events_log_track Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 3.1.11
- ECOSYSTEM: ≥ 4.0.0, < 4.0.2
Update to 3.1.11; Update to 4.0.2