{"action":"Upgrade drupal/core to 9.4.12 or later.","affected":[{"fixed":"9.4.12","introduced":"8.0.0"},{"fixed":"9.5.5","introduced":"9.5.0"},{"fixed":"10.0.5","introduced":"10.0.0"}],"component":"drupal/core","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["9.4.12","9.5.5","10.0.5"],"id":"tcs_01M5KERAZ429V33YAF7S78PPR1","modified_at":"2026-09-19T18:22:52Z","published_at":"2023-03-15T16:26:24Z","references":["https://osv.dev/vulnerability/DRUPAL-CORE-2023-004","https://www.drupal.org/sa-core-2023-004"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DRUPAL-CORE-2023-004","url":"https://osv.dev/vulnerability/DRUPAL-CORE-2023-004"}],"summary":"Drupal core provides a page that outputs the markup from `phpinfo()` to assist with diagnosing PHP configuration."}