System	Score	Found at
cvssv3.1_qr	CRITICAL	https://github.com/advisories/GHSA-jf8c-36vw-98x4
cvssv3.1	5.3	https://github.com/drupal/drupal
generic_textual	MODERATE	https://github.com/drupal/drupal
generic_textual	CRITICAL	https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2018-10-17-4.yaml
cvssv3.1	5.8	https://www.drupal.org/sa-core-2018-006
generic_textual	MODERATE	https://www.drupal.org/sa-core-2018-006

Reference id	Reference type	URL
		https://github.com/drupal/drupal
		https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2018-10-17-4.yaml
		https://www.drupal.org/sa-core-2018-006
GHSA-jf8c-36vw-98x4		https://github.com/advisories/GHSA-jf8c-36vw-98x4

No exploits are available.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://github.com/drupal/drupal

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Found at https://www.drupal.org/sa-core-2018-006

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

No EPSS data available for this vulnerability.

Date	Actor	Action	Source	VulnerableCode Version
2024-05-17T13:03:21.143951+00:00	GHSA Importer	Import	https://github.com/advisories/GHSA-jf8c-36vw-98x4	34.0.0rc4