7.5

CVE-2017-6919

Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the site allows PATCH requests.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Drupal ≫ Drupal Version8.0.0
Drupal ≫ Drupal Version8.0.0 Updatealpha10
Drupal ≫ Drupal Version8.0.0 Updatealpha11
Drupal ≫ Drupal Version8.0.0 Updatealpha12
Drupal ≫ Drupal Version8.0.0 Updatealpha13
Drupal ≫ Drupal Version8.0.0 Updatealpha14
Drupal ≫ Drupal Version8.0.0 Updatealpha15
Drupal ≫ Drupal Version8.0.0 Updatealpha2
Drupal ≫ Drupal Version8.0.0 Updatealpha3
Drupal ≫ Drupal Version8.0.0 Updatealpha4
Drupal ≫ Drupal Version8.0.0 Updatealpha5
Drupal ≫ Drupal Version8.0.0 Updatealpha6
Drupal ≫ Drupal Version8.0.0 Updatealpha7
Drupal ≫ Drupal Version8.0.0 Updatealpha8
Drupal ≫ Drupal Version8.0.0 Updatealpha9
Drupal ≫ Drupal Version8.0.0 Updatebeta1
Drupal ≫ Drupal Version8.0.0 Updatebeta10
Drupal ≫ Drupal Version8.0.0 Updatebeta11
Drupal ≫ Drupal Version8.0.0 Updatebeta12
Drupal ≫ Drupal Version8.0.0 Updatebeta13
Drupal ≫ Drupal Version8.0.0 Updatebeta14
Drupal ≫ Drupal Version8.0.0 Updatebeta15
Drupal ≫ Drupal Version8.0.0 Updatebeta16
Drupal ≫ Drupal Version8.0.0 Updatebeta2
Drupal ≫ Drupal Version8.0.0 Updatebeta3
Drupal ≫ Drupal Version8.0.0 Updatebeta4
Drupal ≫ Drupal Version8.0.0 Updatebeta6
Drupal ≫ Drupal Version8.0.0 Updatebeta7
Drupal ≫ Drupal Version8.0.0 Updatebeta9
Drupal ≫ Drupal Version8.0.0 Updaterc1
Drupal ≫ Drupal Version8.0.0 Updaterc2
Drupal ≫ Drupal Version8.0.0 Updaterc3
Drupal ≫ Drupal Version8.0.0 Updaterc4
Drupal ≫ Drupal Version8.0.1
Drupal ≫ Drupal Version8.0.2
Drupal ≫ Drupal Version8.0.3
Drupal ≫ Drupal Version8.0.4
Drupal ≫ Drupal Version8.0.5
Drupal ≫ Drupal Version8.0.6
Drupal ≫ Drupal Version8.1.0
Drupal ≫ Drupal Version8.1.0 Updatebeta1
Drupal ≫ Drupal Version8.1.0 Updatebeta2
Drupal ≫ Drupal Version8.1.0 Updaterc1
Drupal ≫ Drupal Version8.1.1
Drupal ≫ Drupal Version8.1.2
Drupal ≫ Drupal Version8.1.3
Drupal ≫ Drupal Version8.1.4
Drupal ≫ Drupal Version8.1.5
Drupal ≫ Drupal Version8.1.6
Drupal ≫ Drupal Version8.1.7
Drupal ≫ Drupal Version8.1.8
Drupal ≫ Drupal Version8.1.9
Drupal ≫ Drupal Version8.1.10
Drupal ≫ Drupal Version8.2.0
Drupal ≫ Drupal Version8.2.0 Updatebeta1
Drupal ≫ Drupal Version8.2.0 Updatebeta2
Drupal ≫ Drupal Version8.2.0 Updatebeta3
Drupal ≫ Drupal Version8.2.0 Updaterc1
Drupal ≫ Drupal Version8.2.0 Updaterc2
Drupal ≫ Drupal Version8.2.1
Drupal ≫ Drupal Version8.2.2
Drupal ≫ Drupal Version8.2.3
Drupal ≫ Drupal Version8.2.4
Drupal ≫ Drupal Version8.2.5
Drupal ≫ Drupal Version8.2.6
Drupal ≫ Drupal Version8.2.7
Drupal ≫ Drupal Version8.3.0
Drupal ≫ Drupal Version8.3.0 Updatealpha1
Drupal ≫ Drupal Version8.3.0 Updatebeta1
Drupal ≫ Drupal Version8.3.0 Updaterc1
Drupal ≫ Drupal Version8.3.0 Updaterc2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.6% 0.686
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 1.6 5.9
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P
http://www.securityfocus.com/bid/97941
Third Party Advisory
VDB Entry