Loading vulnerability details…
CVSS v3.1
N/A
EPSS
20.48%
Published
Aug 6, 2018
Modified
Nov 21, 2024
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects safely during certain operations.
Weaknesses (CWE)
Affected Products (1)
References (6)