peter bassill · operator
$ cve CVE-2018-7602 JSON

CVE-2018-7602 KEV EXPLOIT

9.8
CRITICAL · CVSS 3.1 · EPSS 99.2% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2022-05-04.

Description

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.

Scoring

CVSS9.8 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS99.21% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-94
On CISA KEVyes — remediate by 2022-05-04
Public exploityes
Published2018-07-19
Last modified2026-08-13

CISA KEV

NameDrupal Core Remote Code Execution Vulnerability
Added2022-04-13
Due2022-05-04
Vendor / productDrupal / Core
Ransomware useknown

Affected (2)

VendorProduct
debiandebian linux
drupaldrupal

Public exploits

SourceTitleDate
exploit-dbDrupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code (Metasploit)2018-04-30
exploit-dbDrupal < 7.58 - 'Drupalgeddon3' (Authenticated) Remote Code Execution (PoC)2018-04-25

References

→ the Explorer  ·  watch your stack  ·  NVD