CVE-2017-6379

CVE-2017-6379 describes a Cross-Site Request Forgery (CSRF) vulnerability in Drupal 8.2.x versions prior to 8.2.7, specifically affecting certain administrative paths. An attacker could exploit this to disable blocks on a Drupal site, though knowledge of the block ID is required as a mitigating factor. This vulnerability carries a CVSSv3 score of 7.5 (High), indicating a network-based attack with high impact on confidentiality, integrity, and availability, but requiring user interaction and high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, despite some community discussion and media coverage.