Development Environment
Monthly
Improper input validation in the Drupal Development Environment contributed module (all versions, CPE cpe:2.3:a:drupal:development_environment) allows a highly privileged, authenticated network attacker - with user interaction - to compromise both confidentiality and integrity of the affected system. The CVSS vector (AV:N/AC:H/PR:H/UI:R) constrains real-world impact significantly: exploitation requires administrative credentials, a complex attack scenario, and victim interaction. EPSS stands at 0.14% (4th percentile), no public exploit code has been identified, and no CISA KEV listing exists at time of analysis.
Improper input validation in the Drupal Development Environment contributed module (all versions, CPE cpe:2.3:a:drupal:development_environment) allows a highly privileged, authenticated network attacker - with user interaction - to compromise both confidentiality and integrity of the affected system. The CVSS vector (AV:N/AC:H/PR:H/UI:R) constrains real-world impact significantly: exploitation requires administrative credentials, a complex attack scenario, and victim interaction. EPSS stands at 0.14% (4th percentile), no public exploit code has been identified, and no CISA KEV listing exists at time of analysis.