Product · Drupal.org

Drupal Core

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2017-6920 EPSS 20%

Drupal PECL YAML parser unsafe object handling

Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects safely during certain operations.

Drupal.org Drupal Core drupal/core drupal/drupal Web / CMS Packagist

Aug 6, 2018