9.8

CVE-2018-7600

Warnung
Exploit
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Drupal ≫ Drupal Version <= 7.57
Drupal ≫ Drupal Version >= 8.0.0 < 8.3.9
Drupal ≫ Drupal Version >= 8.4.0 < 8.4.6
Drupal ≫ Drupal Version >= 8.5.0 < 8.5.1
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Drupal Core Remote Code Execution Vulnerability

Schwachstelle

Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal site, resulting in complete site compromise.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 99.99% 1
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/103534
Third Party Advisory
Broken Link
VDB Entry
http://www.securitytracker.com/id/1040598
Third Party Advisory
Broken Link
VDB Entry
https://badpackets.net/over-100000-drupal-websites-vulnerable-to-drupalgeddon-2-cve-2018-7600/
Third Party Advisory
Broken Link
https://blog.appsecco.com/remote-code-execution-with-drupal-core-sa-core-2018-002-95e6ecc0c714
Third Party Advisory
https://github.com/a2u/CVE-2018-7600
Third Party Advisory
https://github.com/g0rx/CVE-2018-7600-Drupal-RCE
Patch
Third Party Advisory
https://greysec.net/showthread.php?tid=2912&pid=10561
Third Party Advisory
Broken Link
Issue Tracking
https://groups.drupal.org/security/faq-2018-002
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/03/msg00028.html
Third Party Advisory
https://research.checkpoint.com/uncovering-drupalgeddon-2/
Third Party Advisory
Exploit
https://twitter.com/RicterZ/status/979567469726613504
Third Party Advisory
Broken Link
https://twitter.com/RicterZ/status/984495201354854401
Third Party Advisory
Broken Link
https://twitter.com/arancaytar/status/979090719003627521
Third Party Advisory
https://www.debian.org/security/2018/dsa-4156
Third Party Advisory
https://www.drupal.org/sa-core-2018-002
Vendor Advisory
https://www.exploit-db.com/exploits/44448/
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/44449/
Third Party Advisory
Exploit
VDB Entry
https://www.exploit-db.com/exploits/44482/
Third Party Advisory
Exploit
VDB Entry
https://www.synology.com/support/security/Synology_SA_18_17
Third Party Advisory
https://www.tenable.com/blog/critical-drupal-core-vulnerability-what-you-need-to-know
Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7600
US Government Resource