Lunr Exposed Filters
Monthly
Improper input validation in the Drupal Lunr Exposed Filters contributed module (all versions) can yield high confidentiality and integrity impact under a restrictive set of preconditions. The CVSS vector (AV:N/AC:H/PR:H/UI:R) constrains exploitation to attackers already holding high-privilege Drupal access who can also induce user interaction, making opportunistic or mass exploitation implausible. No public exploit code exists and EPSS sits at 0.14% (4th percentile), consistent with no observed exploitation pressure at time of analysis.
Improper input validation in the Drupal Lunr Exposed Filters contributed module (all versions) can yield high confidentiality and integrity impact under a restrictive set of preconditions. The CVSS vector (AV:N/AC:H/PR:H/UI:R) constrains exploitation to attackers already holding high-privilege Drupal access who can also induce user interaction, making opportunistic or mass exploitation implausible. No public exploit code exists and EPSS sits at 0.14% (4th percentile), consistent with no observed exploitation pressure at time of analysis.