Drupal Multiple Vulnerabilities

Last Update Date: 22 Jun 2017 09:42 Release Date: 22 Jun 2017 3816 Views

RISK: Medium Risk

TYPE: Servers - Internet App Servers

Multiple vulnerabilities have been identified in Drupal. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

Impact

Elevation of Privilege
Remote Code Execution

System / Technologies affected

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix:
https://www.drupal.org/SA-CORE-2017-003

Vulnerability Identifier

CVE-2017-6920
CVE-2017-6921
CVE-2017-6922

Source

US-CERT