Security Advisories (Proposal)

Impact key

• Critical Vulnerability can be used to run attacker code and install software, requiring no elevated user permissions.
• High Vulnerability can be used to gather sensitive data or inject data or code into the site, requiring no more than normal browsing actions.
• Moderate Vulnerabilities that would otherwise be High or Critical except they only work in uncommon non-default configurations or require the user to perform complicated and/or unlikely steps.
• Low Minor security vulnerabilities such as Denial of Service attacks, minor data leaks, or spoofs.

January 1st, 2017

• [Islandora-123](#Islandora-123) Example of a security advisory announce.