[HIGH] File upload access bypass and denial of service

PKSA-6ghb-cyrk-9kmw CVE-2016-3162 GHSA-w2pj-c8x5-jvg2

Affected package: drupal/core

Affected version: >=8.0,<8.0.4

Reported by:
FriendsOfPHP/security-advisories, GitHub