description: Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects safely during certain operations.
problem types: Remote Code Execution
affected:
{
product: Drupal Core
vendor: Drupal.org
versions:
status: affected, version: 8 prior to 8.3.4
}