PT-2024-40492 · Packagist · Drupal/Drupal

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned

Description A visit to the install.php endpoint can cause cached data to become corrupted, potentially impairing a site until caches are rebuilt.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-W333-5F96-MJRR

Affected Products

Drupal/Drupal

References · 4

• https://osv.dev/vulnerability/GHSA-w333-5f96-mjrr · Vendor Advisory
• https://github.com/drupal/drupal · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2019-12-18-1.yaml · Note
• https://drupal.org/sa-core-2019-009 · Note