CVE lookup
CVE-2018-7600
Drupal Core Remote Code Execution Vulnerability
No dossier yet. This CVE is on our watch list.
Dossiers are written only when the selection criteria are met. Until then, use the primary sources below.
Description
Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal site, resulting in complete site compromise.
CISA required action: Apply updates per vendor instructions.