cyfenced.com →

[ CVE-2018-7602 · Published 19 Jul 2018 ]

Drupal Core Remote Code Execution Vulnerability

Exploited · CISA KEV CVSS 9.8 EPSS 99%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-04-13
  • Known to be used in ransomware campaigns
  • EPSS: 99% chance of exploitation in the next 30 days (higher than 100% of CVEs)
  • Critical severity: CVSS 9.8

[ Description ]Official description

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.

CISA: A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 4 May 2022): Apply updates per vendor instructions.

[ References ]References