Security Alert (A23-09-18): Vulnerability in Drupal