Drupal Core Remote Code Execution Vulnerability

Last Update Date: 26 Apr 2018 09:18 Release Date: 26 Apr 2018 4843 Views

RISK: Extremely High Risk

TYPE: Servers - Internet App Servers

A vulnerability was identified in Drupal Core, a remote attacker can exploit this vulnerability to perform remote code execution on the targeted system.

Notes: The vulnerability is being exploited in the wild.

Impact

Remote Code Execution

System / Technologies affected

Drupal 7.x and 8.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Upgrade to a fixed version:
https://www.drupal.org/sa-core-2018-004

Vulnerability Identifier

CVE-2018-7602

Source

Security Tracker