← CVE Radar
CVE-2018-7600Drupal Core Remote Code Execution Vulnerability
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.
9.8 CRITICALEPSS 99.99%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 7.5 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:P/I:P/A:P |
CISA required action
⚡ Known exploited · remediation due May 3, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2018-7600
- Status
- Analyzed
- Assigner (CNA)
- drupal
- Published
- Mar 29, 2018
- Last modified
- 2026-06-17 02:03 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.11 version range
- Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1
References
- securityfocus.com http://www.securityfocus.com/bid/103534
- securitytracker.com http://www.securitytracker.com/id/1040598
- badpackets.net https://badpackets.net/over-100000-drupal-websites-vulnerable-to-drupalgeddon-2-cve-2018-7600/
- blog.appsecco.com https://blog.appsecco.com/remote-code-execution-with-drupal-core-sa-core-2018-002-95e6ecc0c714
- github.com https://github.com/a2u/CVE-2018-7600
- github.com https://github.com/g0rx/CVE-2018-7600-Drupal-RCE
- greysec.net https://greysec.net/showthread.php?tid=2912&pid=10561
- groups.drupal.org https://groups.drupal.org/security/faq-2018-002
- lists.debian.org https://lists.debian.org/debian-lts-announce/2018/03/msg00028.html
- research.checkpoint.com https://research.checkpoint.com/uncovering-drupalgeddon-2/
- twitter.com https://twitter.com/RicterZ/status/979567469726613504
- twitter.com https://twitter.com/RicterZ/status/984495201354854401
- twitter.com https://twitter.com/arancaytar/status/979090719003627521
- debian.org https://www.debian.org/security/2018/dsa-4156
- drupal.org https://www.drupal.org/sa-core-2018-002
- exploit-db.com https://www.exploit-db.com/exploits/44448/
- exploit-db.com https://www.exploit-db.com/exploits/44449/
- exploit-db.com https://www.exploit-db.com/exploits/44482/
- synology.com https://www.synology.com/support/security/Synology_SA_18_17
- tenable.com https://www.tenable.com/blog/critical-drupal-core-vulnerability-what-you-need-to-know
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7600