Brute force amplification attacks via XML-RPC

PKSA-dcs8-k9rm-1jyb CVE-2016-3163

Affected package: drupal/core

Affected version: >=8.0,<8.0.4

Reported by:
FriendsOfPHP/security-advisories