Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-297X-J9PM-XJGG
HistoryApr 23, 2024 - 10:36 p.m.

Drupal Core Remote Code Execution Vulnerability

2024-04-2322:36:09
CWE-94
GitHub Advisory Database
github.com
15
drupal
remote code execution
multiple subsystems
version 7.x
version 8.x
attack vectors
site compromise
highly critical
sa-core-2018-002
exploited in the wild

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

0.973 High

EPSS

Percentile

99.9%

JSON

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.

Affected configurations

Vulners
Node
drupaldrupalRange<8.5.3
OR
drupaldrupalRange<8.4.8
OR
drupaldrupalRange<7.59
OR
drupalcoreRange<8.5.3
OR
drupalcoreRange<8.4.8
OR
drupalcoreRange<7.59

Related

ibm 1
zdt 2
nessus 9
openvas 18
cve 1
debian 3
exploitpack 2
ubuntucve 1
osv 5
f5 1
drupal 1
debiancve 1
friendsofphp 2
dsquare 1
threatpost 1
checkpoint_advisories 1
nvd 1
packetstorm 2
alpinelinux 1
cisa_kev 1
nuclei 1
cvelist 1
seebug 1
archlinux 1
fedora 14
attackerkb 1
prion 1
exploitdb 2
impervablog 1
veracode 1
thn 2
malwarebytes 1
ubuntu 1
fireeye 1
kitploit 1
ibm
ibm
Security Bulletin: API Connect Developer Portal is affected by a Drupal vulnerability (CVE-2018-7602)
2018-06-15 07:09:14
zdt
zdt
Drupal < 7.58 - drupalgeddon3 Authenticated Remote Code Execution (PoC) Exploit
2018-04-26 00:00:00
Drupal < 7.58 - Drupalgeddon3 Authenticated Remote Code Exploit
2018-05-01 00:00:00
nessus
nessus
Debian DSA-4180-1 : drupal7 - security update (Drupalgeddon 2)
2018-04-26 00:00:00
Fedora 27 : drupal7 (2018-b9ad458866) (Drupalgeddon 2)
2018-05-11 00:00:00
Drupal 7.x < 7.59 / 8.4.x < 8.4.8 / 8.5.x < 8.5.3 Remote Code Execution Vulnerability (SA-CORE-2018-004)
2018-04-25 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4180-1)
2018-04-24 00:00:00
Debian: Security Advisory (DLA-1365-1)
2018-04-26 00:00:00
Fedora Update for drupal7 FEDORA-2018-18023f40fa
2018-12-04 00:00:00
cve
cve
CVE-2018-7602
2018-07-19 17:29:00
debian
debian
[SECURITY] [DLA 1365-1] drupal7 security update
2018-04-26 09:28:04
[SECURITY] [DSA 4180-1] drupal7 security update
2018-04-25 20:13:52
[SECURITY] [DSA 4180-1] drupal7 security update
2018-04-25 20:13:52
exploitpack
exploitpack
Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code (Metasploit)
2018-04-30 00:00:00
Drupal 7.58 - Drupalgeddon3 (Authenticated) Remote Code Execution (PoC)
2018-04-25 00:00:00
ubuntucve
ubuntucve
CVE-2018-7602
2018-07-19 00:00:00
osv
osv
CVE-2018-7602
2018-07-19 17:29:00
Drupal Core Remote Code Execution Vulnerability
2024-04-23 22:36:09
drupal7 - security update
2018-04-25 00:00:00
f5
f5
K59591931 : Drupal vulnerability CVE-2018-7602
2018-04-30 00:00:00
drupal
drupal
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
2018-04-25 00:00:00
debiancve
debiancve
CVE-2018-7602
2018-07-19 17:29:00
friendsofphp
friendsofphp
Critical - Remote Code Execution
1970-01-01 00:00:00
Critical - Remote Code Execution
1970-01-01 00:00:00
dsquare
dsquare
Drupal 7 SA-CORE-2018-004 RCE
2018-05-08 00:00:00
threatpost
threatpost
Ransomware Attack Hits Ukrainian Energy Ministry, Exploiting Drupalgeddon2
2018-04-24 18:34:37
checkpoint_advisories
checkpoint_advisories
Drupal Core Remote Code Execution (CVE-2018-7602)
2018-04-26 00:00:00
nvd
nvd
CVE-2018-7602
2018-07-19 17:29:00
packetstorm
packetstorm
Drupal drupgeddon3 Remote Code Execution
2018-04-26 00:00:00
Drupalgeddon3 Remote Code Execution
2018-04-30 00:00:00
alpinelinux
alpinelinux
CVE-2018-7602
2018-07-19 17:29:00
cisa_kev
cisa_kev
Drupal Core Remote Code Execution Vulnerability
2022-04-13 00:00:00
nuclei
nuclei
Drupal - Remote Code Execution
2022-02-04 19:09:58
cvelist
cvelist
CVE-2018-7602 Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
2018-07-19 17:00:00
seebug
seebug
Drupal core Remote Code Execution(CVE-2018-7602)
2018-04-26 00:00:00
archlinux
archlinux
[ASA-201804-10] drupal: arbitrary command execution
2018-04-27 00:00:00
fedora
fedora
[SECURITY] Fedora 28 Update: drupal7-7.59-1.fc28
2018-05-05 20:37:11
[SECURITY] Fedora 28 Update: drupal7-7.60-2.fc28
2018-12-03 01:39:08
[SECURITY] Fedora 28 Update: drupal7-7.64-1.fc28
2019-03-06 15:28:58
attackerkb
attackerkb
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
2018-07-19 00:00:00
prion
prion
Remote code execution
2018-07-19 17:29:00
exploitdb
exploitdb
Drupal &lt; 7.58 - &#039;Drupalgeddon3&#039; (Authenticated) Remote Code Execution (PoC)
2018-04-25 00:00:00
Drupal &lt; 7.58 - &#039;Drupalgeddon3&#039; (Authenticated) Remote Code (Metasploit)
2018-04-30 00:00:00
impervablog
impervablog
The State of Web Application Vulnerabilities in 2018
2019-01-09 14:00:26
veracode
veracode
Remote Code Execution (RCE)
2018-04-26 10:18:46
thn
thn
Release of PoC Exploit for New Drupal Flaw Once Again Puts Sites Under Attack
2018-04-26 12:32:00
Third Critical Drupal Flaw Discovered—Patch Your Sites Immediately
2018-04-25 16:41:00
malwarebytes
malwarebytes
A look into Drupalgeddon’s client-side attacks
2018-05-18 15:00:00
ubuntu
ubuntu
Drupal vulnerabilities
2021-03-15 00:00:00
fireeye
fireeye
Think Fast: Time Between Disclosure, Patch Release and Vulnerability Exploitation — Intelligence for Vulnerability Management, Part Two
2020-04-13 00:00:00
kitploit
kitploit
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

Low

0.973 High

EPSS

Percentile

99.9%

JSON
Related for GHSA-297X-J9PM-XJGG
ibm1zdt2nessus9openvas18cve1debian3exploitpack2ubuntucve1osv5f51drupal1debiancve1friendsofphp2dsquare1threatpost1checkpoint_advisories1nvd1packetstorm2alpinelinux1cisa_kev1nuclei1cvelist1seebug1archlinux1fedora14attackerkb1prion1exploitdb2impervablog1veracode1thn2malwarebytes1ubuntu1fireeye1kitploit1