{ "affected": [ { "ranges": [ { "database_specific": { "cpe": [ "cpe:2.3:a:drupal:drupal:8.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha14:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha15:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta1:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta10:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta11:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta12:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta13:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta14:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta15:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta16:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta2:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta3:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta4:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta6:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta7:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:beta9:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:rc2:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:rc3:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:rc4:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.0:beta1:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.0:beta2:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.2:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.3:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.4:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.5:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.6:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.7:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.8:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.9:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.1.10:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.2.0:beta1:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.2.0:beta2:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.2.0:beta3:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.2.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.2.0:rc2:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.2.2:*:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "8.0.0" }, { "last_affected": "8.0.0" }, { "introduced": "8.0.0-alpha14" }, { "last_affected": "8.0.0-alpha14" }, { "introduced": "8.0.0-alpha15" }, { "last_affected": "8.0.0-alpha15" }, { "introduced": "8.0.0-beta1" }, { "last_affected": "8.0.0-beta1" }, { "introduced": "8.0.0-beta10" }, { "last_affected": "8.0.0-beta10" }, { "introduced": "8.0.0-beta11" }, { "last_affected": "8.0.0-beta11" }, { "introduced": "8.0.0-beta12" }, { "last_affected": "8.0.0-beta12" }, { "introduced": "8.0.0-beta13" }, { "last_affected": "8.0.0-beta13" }, { "introduced": "8.0.0-beta14" }, { "last_affected": "8.0.0-beta14" }, { "introduced": "8.0.0-beta15" }, { "last_affected": "8.0.0-beta15" }, { "introduced": "8.0.0-beta16" }, { "last_affected": "8.0.0-beta16" }, { "introduced": "8.0.0-beta2" }, { "last_affected": "8.0.0-beta2" }, { "introduced": "8.0.0-beta3" }, { "last_affected": "8.0.0-beta3" }, { "introduced": "8.0.0-beta4" }, { "last_affected": "8.0.0-beta4" }, { "introduced": "8.0.0-beta6" }, { "last_affected": "8.0.0-beta6" }, { "introduced": "8.0.0-beta7" }, { "last_affected": "8.0.0-beta7" }, { "introduced": "8.0.0-beta9" }, { "last_affected": "8.0.0-beta9" }, { "introduced": "8.0.0-rc1" }, { "last_affected": "8.0.0-rc1" }, { "introduced": "8.0.0-rc2" }, { "last_affected": "8.0.0-rc2" }, { "introduced": "8.0.0-rc3" }, { "last_affected": "8.0.0-rc3" }, { "introduced": "8.0.0-rc4" }, { "last_affected": "8.0.0-rc4" }, { "introduced": "8.0.1" }, { "last_affected": "8.0.1" }, { "introduced": "8.0.2" }, { "last_affected": "8.0.2" }, { "introduced": "8.0.3" }, { "last_affected": "8.0.3" }, { "introduced": "8.0.4" }, { "last_affected": "8.0.4" }, { "introduced": "8.0.5" }, { "last_affected": "8.0.5" }, { "introduced": "8.0.6" }, { "last_affected": "8.0.6" }, { "introduced": "8.1.0" }, { "last_affected": "8.1.0" }, { "introduced": "8.1.0-beta1" }, { "last_affected": "8.1.0-beta1" }, { "introduced": "8.1.0-beta2" }, { "last_affected": "8.1.0-beta2" }, { "introduced": "8.1.0-rc1" }, { "last_affected": "8.1.0-rc1" }, { "introduced": "8.1.1" }, { "last_affected": "8.1.1" }, { "introduced": "8.1.2" }, { "last_affected": "8.1.2" }, { "introduced": "8.1.3" }, { "last_affected": "8.1.3" }, { "introduced": "8.1.4" }, { "last_affected": "8.1.4" }, { "introduced": "8.1.5" }, { "last_affected": "8.1.5" }, { "introduced": "8.1.6" }, { "last_affected": "8.1.6" }, { "introduced": "8.1.7" }, { "last_affected": "8.1.7" }, { "introduced": "8.1.8" }, { "last_affected": "8.1.8" }, { "introduced": "8.1.9" }, { "last_affected": "8.1.9" }, { "introduced": "8.1.10" }, { "last_affected": "8.1.10" }, { "introduced": "8.2.0" }, { "last_affected": "8.2.0" }, { "introduced": "8.2.0-beta1" }, { "last_affected": "8.2.0-beta1" }, { "introduced": "8.2.0-beta2" }, { "last_affected": "8.2.0-beta2" }, { "introduced": "8.2.0-beta3" }, { "last_affected": "8.2.0-beta3" }, { "introduced": "8.2.0-rc1" }, { "last_affected": "8.2.0-rc1" }, { "introduced": "8.2.0-rc2" }, { "last_affected": "8.2.0-rc2" }, { "introduced": "8.2.1" }, { "last_affected": "8.2.1" }, { "introduced": "8.2.2" }, { "last_affected": "8.2.2" } ], "source": "CPE_STRING" }, "events": [ { "introduced": "35c2f3ca5c935f3d8bde15932a712677c9bbd50f" }, { "last_affected": "ce4cc6593bb01ab2b7817ae54beed9632f6e850e" } ], "repo": "https://github.com/drupal/drupal", "type": "GIT" } ], "versions": [ "8.0.0", "8.0.0-alpha14", "8.0.0-alpha15", "8.0.0-beta1", "8.0.0-beta10", "8.0.0-beta11", "8.0.0-beta12", "8.0.0-beta13", "8.0.0-beta14", "8.0.0-beta15", "8.0.0-beta16", "8.0.0-beta2", "8.0.0-beta3", "8.0.0-beta4", "8.0.0-beta6", "8.0.0-beta7", "8.0.0-beta9", "8.0.0-rc1", "8.0.0-rc2", "8.0.0-rc3", "8.0.0-rc4", "8.0.1", "8.0.2", "8.0.3", "8.0.4", "8.0.5", "8.0.6", "8.1.0", "8.1.0-beta1", "8.1.0-beta2", "8.1.0-rc1", "8.1.1", "8.1.10", "8.1.2", "8.1.3", "8.1.4", "8.1.5", "8.1.6", "8.1.7", "8.1.8", "8.1.9", "8.2.0", "8.2.0-beta1", "8.2.0-beta2", "8.2.0-beta3", "8.2.0-rc1", "8.2.0-rc2", "8.2.1", "8.2.2" ] } ], "database_specific": { "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:drupal:drupal:8.0.0:alpha10:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha11:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha12:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha13:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha2:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha3:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha4:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha5:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha6:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha7:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha8:*:*:*:*:*:*", "cpe:2.3:a:drupal:drupal:8.0.0:alpha9:*:*:*:*:*:*" ], "extracted_events": [ { "introduced": "8.0.0-alpha10" }, { "last_affected": "8.0.0-alpha10" }, { "introduced": "8.0.0-alpha11" }, { "last_affected": "8.0.0-alpha11" }, { "introduced": "8.0.0-alpha12" }, { "last_affected": "8.0.0-alpha12" }, { "introduced": "8.0.0-alpha13" }, { "last_affected": "8.0.0-alpha13" }, { "introduced": "8.0.0-alpha2" }, { "last_affected": "8.0.0-alpha2" }, { "introduced": "8.0.0-alpha3" }, { "last_affected": "8.0.0-alpha3" }, { "introduced": "8.0.0-alpha4" }, { "last_affected": "8.0.0-alpha4" }, { "introduced": "8.0.0-alpha5" }, { "last_affected": "8.0.0-alpha5" }, { "introduced": "8.0.0-alpha6" }, { "last_affected": "8.0.0-alpha6" }, { "introduced": "8.0.0-alpha7" }, { "last_affected": "8.0.0-alpha7" }, { "introduced": "8.0.0-alpha8" }, { "last_affected": "8.0.0-alpha8" }, { "introduced": "8.0.0-alpha9" }, { "last_affected": "8.0.0-alpha9" } ], "source": "CPE_STRING", "vendor_product": "drupal:drupal" } ] }, "details": "The transliterate mechanism in Drupal 8.x before 8.2.3 allows remote attackers to cause a denial of service via a crafted URL.", "id": "CVE-2016-9452", "modified": "2026-07-08T05:36:21.260273182Z", "published": "2016-11-25T18:59:04.543Z", "references": [ { "type": "ADVISORY", "url": "http://www.securityfocus.com/bid/94367" }, { "type": "FIX", "url": "https://www.drupal.org/SA-CORE-2016-005" } ], "severity": [ { "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "type": "CVSS_V3" } ] }