Drupal Core Remote Code Execution Vulnerability

Last Update Date: 29 Mar 2018 10:16 Release Date: 29 Mar 2018 3269 Views

RISK: Medium Risk

TYPE: Servers - Internet App Servers

A vulnerability has been identified in Drupal Core, a remote attacker can exploit this vulnerability to perform remote code execution on the targeted system.

Impact

Remote Code Execution

System / Technologies affected

Drupal 7.x and 8.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix: https://www.drupal.org/sa-core-2018-002

Vulnerability Identifier

CVE-2018-7600

Source

AusCERT