System	Score	Found at
cvssv3.1_qr	MODERATE	https://github.com/advisories/GHSA-6ccv-8fgf-cjpw
cvssv3.1	6.5	https://github.com/drupal/core
generic_textual	CRITICAL	https://github.com/drupal/core
generic_textual	MODERATE	https://github.com/drupal/core/commit/2f76ac716ca8019bc60579fdfc8aa6cd65d57dff
generic_textual	MODERATE	https://github.com/drupal/core/commit/5e606b560ac4ecb08135f12b6165bbe0348346a0
generic_textual	MODERATE	https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2024-01-17.yaml
generic_textual	MODERATE	https://www.drupal.org/sa-core-2024-001

Reference id	Reference type	URL
		https://github.com/drupal/core
		https://github.com/drupal/core/commit/2f76ac716ca8019bc60579fdfc8aa6cd65d57dff
		https://github.com/drupal/core/commit/5e606b560ac4ecb08135f12b6165bbe0348346a0
		https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2024-01-17.yaml
		https://www.drupal.org/sa-core-2024-001
GHSA-6ccv-8fgf-cjpw		https://github.com/advisories/GHSA-6ccv-8fgf-cjpw

No exploits are available.

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N Found at https://github.com/drupal/core

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

No EPSS data available for this vulnerability.

Date	Actor	Action	Source	VulnerableCode Version
2024-02-12T23:58:28.211765+00:00	GHSA Importer	Import	https://github.com/advisories/GHSA-6ccv-8fgf-cjpw	34.0.0rc2