PT-2024-40413 · Packagist · Drupal Core

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned, use: (affected versions not specified)

Description A visit to the install.php endpoint can cause cached data to become corrupted, potentially impairing a site until caches are rebuilt.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-PR99-C33P-FWF6

Affected Products

Drupal Core

References · 4

• https://osv.dev/vulnerability/GHSA-pr99-c33p-fwf6 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/2019-12-18-1.yaml · Note
• https://github.com/drupal/core · Note
• https://drupal.org/sa-core-2019-009 · Note