Skip to main content

Drupal Remote Code Execution Vulnerability

Last Update Date: 10 May 2019 10:46 Release Date: 10 May 2019 5448 Views

RISK: Medium Risk

TYPE: Servers - Internet App Servers

TYPE: Internet App Servers

A vulnerability was identified in Drupal, a remote user could exploit this vulnerability to trigger remote code execution on the targeted system.


Impact

  • Remote Code Execution

System / Technologies affected

  • Versions prior to Drupal 8.7.1
  • Versions prior to Drupal 8.6.16
  • Versions prior to Drupal 7.67

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

  • Update to Drupal 8.7.1
  • Update to Drupal 8.6.16
  • Update to Drupal 7.67

Vulnerability Identifier


Source


Related Link