by Kastro
Paper/Archive/CVE-2018-7600

CVE-2018-7600

Drupal Drupal Core — Drupal Core Remote Code Execution Vulnerability

KEV · due 3 Mayransomware useEPSS 100%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

Affected

ProductAffectedFixed inSource
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refgithub.com/g0rx/CVE-2018-7600-Drupal-RCErefsecuritytracker.com/id/1040598reftwitter.com/arancaytar/status/979090719003627521reftwitter.com/RicterZ/status/979567469726613504refdrupal.org/sa-core-2018-002refsynology.com/support/security/Synology_SA_18_17refgithub.com/a2u/CVE-2018-7600exploitexploit-db.com/exploits/44482refresearch.checkpoint.com/uncovering-drupalgeddon-2refgroups.drupal.org/security/faq-2018-002advisorydebian.org/security/2018/dsa-4156reflists.debian.org/debian-lts-announce/2018/03/msg00028.htmlexploitexploit-db.com/exploits/44448refsecurityfocus.com/bid/103534refbadpackets.net/over-100000-drupal-websites-vulnerable-to-drupalgeddon-2-cve-2018-7600refgreysec.net/showthread.php?tid=2912&pid=10561refblog.appsecco.com/remote-code-execution-with-drupal-core-sa-core-2018-002-95e6ecc0c714reftenable.com/blog/critical-drupal-core-vulnerability-what-you-need-to-knowreftwitter.com/RicterZ/status/984495201354854401exploitexploit-db.com/exploits/44449refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7600kevcisa.gov/known-exploited-vulnerabilities-catalog