GHSA-7fh9-933g-885p

Drupal Core Remote Code Execution Vulnerability

Description

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

Affected packages

References

• https://nvd.nist.gov/vuln/detail/CVE-2018-7600 ADVISORY
• https://www.tenable.com/blog/critical-drupal-core-vulnerability-what-you-need-to-know WEB
• https://www.synology.com/support/security/Synology_SA_18_17 WEB
• https://www.exploit-db.com/exploits/44482 WEB
• https://www.exploit-db.com/exploits/44449 WEB
• https://www.exploit-db.com/exploits/44448 WEB
• https://www.drupal.org/sa-core-2018-002 WEB
• https://www.debian.org/security/2018/dsa-4156 WEB
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7600 WEB
• https://twitter.com/arancaytar/status/979090719003627521 WEB
• https://twitter.com/RicterZ/status/984495201354854401 WEB
• https://twitter.com/RicterZ/status/979567469726613504 WEB
• https://research.checkpoint.com/uncovering-drupalgeddon-2 WEB
• https://lists.debian.org/debian-lts-announce/2018/03/msg00028.html WEB
• https://groups.drupal.org/security/faq-2018-002 WEB
• https://greysec.net/showthread.php?tid=2912&pid=10561 WEB
• https://github.com/g0rx/CVE-2018-7600-Drupal-RCE WEB
• https://github.com/drupal/core PACKAGE
• https://github.com/a2u/CVE-2018-7600 WEB
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2018-7600.yaml WEB
• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2018-7600.yaml WEB
• https://blog.appsecco.com/remote-code-execution-with-drupal-core-sa-core-2018-002-95e6ecc0c714 WEB
• https://badpackets.net/over-100000-drupal-websites-vulnerable-to-drupalgeddon-2-cve-2018-7600 WEB
• http://www.securityfocus.com/bid/103534 WEB
• http://www.securitytracker.com/id/1040598 WEB

Sources