⚠️ CISA Known Exploited Vulnerability
Active ThreatThis vulnerability is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog. Active exploitation has been observed in the wild. This poses significant risk to federal enterprises and should be prioritized for immediate patching.
CVE-2018-7600
Critical CISA KEV
Low
Medium
High
Critical
9.8
CVSS Score
Vulnerability Description
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.
CVSS Metrics
Common Vulnerability Scoring System
Vector String:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
N
Attack Complexity
L
Privileges Required
N
User Interaction
N
Scope
U
Confidentiality
H
Integrity
H
Availability
H
Known Affected Software
214 configuration(s) from 2 vendor(s)
debian_linux
Version:
8.0
CPE:
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
debian_linux
Version:
7.0
CPE:
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
debian_linux
Version:
9.0
CPE:
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
drupal
Version:
5.5.
CPE:
cpe:2.3:a:drupal:drupal:5.5.:*:*:*:*:*:*:*
drupal
Version:
4.7.9
CPE:
cpe:2.3:a:drupal:drupal:4.7.9:*:*:*:*:*:*:*
drupal
Version:
8.0
CPE:
cpe:2.3:a:drupal:drupal:8.0:alpha10:*:*:*:*:*:*
drupal
Version:
8.3.8
CPE:
cpe:2.3:a:drupal:drupal:8.3.8:*:*:*:*:*:*:*
drupal
Version:
6
CPE:
cpe:2.3:a:drupal:drupal:6:*:*:*:*:*:*:*
drupal
Version:
6.14
CPE:
cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*
drupal
Version:
7.53
CPE:
cpe:2.3:a:drupal:drupal:7.53:*:*:*:*:*:*:*
drupal
Version:
4.5.3
CPE:
cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*
drupal
Version:
4.3.1
CPE:
cpe:2.3:a:drupal:drupal:4.3.1:*:*:*:*:*:*:*
drupal
Version:
8.4.5
CPE:
cpe:2.3:a:drupal:drupal:8.4.5:*:*:*:*:*:*:*
drupal
Version:
7.38
CPE:
cpe:2.3:a:drupal:drupal:7.38:*:*:*:*:*:*:*
drupal
Version:
5.10
CPE:
cpe:2.3:a:drupal:drupal:5.10:*:*:*:*:*:*:*
drupal
Version:
4.6.11
CPE:
cpe:2.3:a:drupal:drupal:4.6.11:*:*:*:*:*:*:*
drupal
Version:
8.2.2
CPE:
cpe:2.3:a:drupal:drupal:8.2.2:*:*:*:*:*:*:*
drupal
Version:
7.26
CPE:
cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:*
drupal
Version:
8.4.2
CPE:
cpe:2.3:a:drupal:drupal:8.4.2:*:*:*:*:*:*:*
drupal
Version:
6.17
CPE:
cpe:2.3:a:drupal:drupal:6.17:*:*:*:*:*:*:*
drupal
Version:
6.15
CPE:
cpe:2.3:a:drupal:drupal:6.15:*:*:*:*:*:*:*
drupal
Version:
8.5.0
CPE:
cpe:2.3:a:drupal:drupal:8.5.0:-:*:*:*:*:*:*
drupal
Version:
6.31
CPE:
cpe:2.3:a:drupal:drupal:6.31:*:*:*:*:*:*:*
drupal
Version:
7.9
CPE:
cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*
drupal
Version:
6.20
CPE:
cpe:2.3:a:drupal:drupal:6.20:*:*:*:*:*:*:*
drupal
Version:
6.7
CPE:
cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*
drupal
Version:
5.6
CPE:
cpe:2.3:a:drupal:drupal:5.6:*:*:*:*:*:*:*
drupal
Version:
5.21
CPE:
cpe:2.3:a:drupal:drupal:5.21:*:*:*:*:*:*:*
drupal
Version:
7.5
CPE:
cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*
drupal
Version:
7.3
CPE:
cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*
drupal
Version:
7.32
CPE:
cpe:2.3:a:drupal:drupal:7.32:*:*:*:*:*:*:*
drupal
Version:
7.24
CPE:
cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:*
drupal
Version:
4.6.8
CPE:
cpe:2.3:a:drupal:drupal:4.6.8:*:*:*:*:*:*:*
drupal
Version:
8.1.10
CPE:
cpe:2.3:a:drupal:drupal:8.1.10:*:*:*:*:*:*:*
drupal
Version:
8.0.0
CPE:
cpe:2.3:a:drupal:drupal:8.0.0:beta10:*:*:*:*:*:*
drupal
Version:
7.41
CPE:
cpe:2.3:a:drupal:drupal:7.41:*:*:*:*:*:*:*
drupal
Version:
7.42
CPE:
cpe:2.3:a:drupal:drupal:7.42:*:*:*:*:*:*:*
drupal
Version:
7.4
CPE:
cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*
drupal
Version:
6.30
CPE:
cpe:2.3:a:drupal:drupal:6.30:*:*:*:*:*:*:*
drupal
Version:
6.11
CPE:
cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*
drupal
Version:
8.1.4
CPE:
cpe:2.3:a:drupal:drupal:8.1.4:*:*:*:*:*:*:*
drupal
Version:
8.4.3
CPE:
cpe:2.3:a:drupal:drupal:8.4.3:*:*:*:*:*:*:*
drupal
Version:
4.3.2
CPE:
cpe:2.3:a:drupal:drupal:4.3.2:*:*:*:*:*:*:*
drupal
Version:
8.1.2
CPE:
cpe:2.3:a:drupal:drupal:8.1.2:*:*:*:*:*:*:*
drupal
Version:
7.11
CPE:
cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*
drupal
Version:
4.7
CPE:
cpe:2.3:a:drupal:drupal:4.7:*:*:*:*:*:*:*
drupal
Version:
7.0
CPE:
cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*
drupal
Version:
8.3.7
CPE:
cpe:2.3:a:drupal:drupal:8.3.7:*:*:*:*:*:*:*
drupal
Version:
5.23
CPE:
cpe:2.3:a:drupal:drupal:5.23:*:*:*:*:*:*:*
drupal
Version:
4.5.5
CPE:
cpe:2.3:a:drupal:drupal:4.5.5:*:*:*:*:*:*:*
drupal
Version:
4.6.10
CPE:
cpe:2.3:a:drupal:drupal:4.6.10:*:*:*:*:*:*:*
drupal
Version:
7.21
CPE:
cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:*
drupal
Version:
4.7.5
CPE:
cpe:2.3:a:drupal:drupal:4.7.5:*:*:*:*:*:*:*
drupal
Version:
5.16
CPE:
cpe:2.3:a:drupal:drupal:5.16:*:*:*:*:*:*:*
drupal
Version:
7.27
CPE:
cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:*
drupal
Version:
6.37
CPE:
cpe:2.3:a:drupal:drupal:6.37:*:*:*:*:*:*:*
drupal
Version:
4.5
CPE:
cpe:2.3:a:drupal:drupal:4.5:*:*:*:*:*:*:*
drupal
Version:
5.12
CPE:
cpe:2.3:a:drupal:drupal:5.12:*:*:*:*:*:*:*
drupal
Version:
8.0.3
CPE:
cpe:2.3:a:drupal:drupal:8.0.3:*:*:*:*:*:*:*
drupal
Version:
6.29
CPE:
cpe:2.3:a:drupal:drupal:6.29:*:*:*:*:*:*:*
drupal
Version:
4.6.0
CPE:
cpe:2.3:a:drupal:drupal:4.6.0:*:*:*:*:*:*:*
drupal
Version:
6.0
CPE:
cpe:2.3:a:drupal:drupal:6.0:dev:*:*:*:*:*:*
drupal
Version:
5.5
CPE:
cpe:2.3:a:drupal:drupal:5.5:*:*:*:*:*:*:*
drupal
Version:
4.5.0
CPE:
cpe:2.3:a:drupal:drupal:4.5.0:*:*:*:*:*:*:*
drupal
Version:
7.50
CPE:
cpe:2.3:a:drupal:drupal:7.50:*:*:*:*:*:*:*
drupal
Version:
6.26
CPE:
cpe:2.3:a:drupal:drupal:6.26:*:*:*:*:*:*:*
drupal
Version:
8.0.2
CPE:
cpe:2.3:a:drupal:drupal:8.0.2:*:*:*:*:*:*:*
drupal
Version:
6.9
CPE:
cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*
drupal
Version:
4.7.3
CPE:
cpe:2.3:a:drupal:drupal:4.7.3:*:*:*:*:*:*:*
drupal
Version:
7.44
CPE:
cpe:2.3:a:drupal:drupal:7.44:*:*:*:*:*:*:*
drupal
Version:
8.0.1
CPE:
cpe:2.3:a:drupal:drupal:8.0.1:*:*:*:*:*:*:*
drupal
Version:
8.2.5
CPE:
cpe:2.3:a:drupal:drupal:8.2.5:*:*:*:*:*:*:*
drupal
Version:
6.8
CPE:
cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*
drupal
Version:
6.18
CPE:
cpe:2.3:a:drupal:drupal:6.18:*:*:*:*:*:*:*
drupal
Version:
7.51
CPE:
cpe:2.3:a:drupal:drupal:7.51:*:*:*:*:*:*:*
drupal
Version:
6.34
CPE:
cpe:2.3:a:drupal:drupal:6.34:*:*:*:*:*:*:*
drupal
Version:
4.6.2
CPE:
cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*
drupal
Version:
6.24
CPE:
cpe:2.3:a:drupal:drupal:6.24:*:*:*:*:*:*:*
drupal
Version:
5.15
CPE:
cpe:2.3:a:drupal:drupal:5.15:*:*:*:*:*:*:*
drupal
Version:
6.21
CPE:
cpe:2.3:a:drupal:drupal:6.21:*:*:*:*:*:*:*
drupal
Version:
4.5.2
CPE:
cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*
drupal
Version:
7.23
CPE:
cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:*
drupal
Version:
7.35
CPE:
cpe:2.3:a:drupal:drupal:7.35:*:*:*:*:*:*:*
drupal
Version:
5.0
CPE:
cpe:2.3:a:drupal:drupal:5.0:dev:*:*:*:*:*:*
drupal
Version:
6.28
CPE:
cpe:2.3:a:drupal:drupal:6.28:*:*:*:*:*:*:*
drupal
Version:
7.57
CPE:
cpe:2.3:a:drupal:drupal:7.57:*:*:*:*:*:*:*
drupal
Version:
8.1.3
CPE:
cpe:2.3:a:drupal:drupal:8.1.3:*:*:*:*:*:*:*
drupal
Version:
5.4
CPE:
cpe:2.3:a:drupal:drupal:5.4:*:*:*:*:*:*:*
drupal
Version:
4.5.1
CPE:
cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*
drupal
Version:
8.4.1
CPE:
cpe:2.3:a:drupal:drupal:8.4.1:*:*:*:*:*:*:*
drupal
Version:
7.56
CPE:
cpe:2.3:a:drupal:drupal:7.56:*:*:*:*:*:*:*
drupal
Version:
7.8
CPE:
cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*
drupal
Version:
8.2.0
CPE:
cpe:2.3:a:drupal:drupal:8.2.0:-:*:*:*:*:*:*
drupal
Version:
6.1
CPE:
cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*
drupal
Version:
8.1.7
CPE:
cpe:2.3:a:drupal:drupal:8.1.7:*:*:*:*:*:*:*
drupal
Version:
7.43
CPE:
cpe:2.3:a:drupal:drupal:7.43:*:*:*:*:*:*:*
drupal
Version:
4.6
CPE:
cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*
drupal
Version:
8.2.1
CPE:
cpe:2.3:a:drupal:drupal:8.2.1:*:*:*:*:*:*:*
drupal
Version:
8.3.6
CPE:
cpe:2.3:a:drupal:drupal:8.3.6:*:*:*:*:*:*:*
drupal
Version:
4.7.0
CPE:
cpe:2.3:a:drupal:drupal:4.7.0:*:*:*:*:*:*:*
drupal
Version:
5.1
CPE:
cpe:2.3:a:drupal:drupal:5.1:*:*:*:*:*:*:*
drupal
Version:
4.6.3
CPE:
cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*
drupal
Version:
8.1.5
CPE:
cpe:2.3:a:drupal:drupal:8.1.5:*:*:*:*:*:*:*
drupal
Version:
7.7
CPE:
cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*
drupal
Version:
5.22
CPE:
cpe:2.3:a:drupal:drupal:5.22:*:*:*:*:*:*:*
drupal
Version:
6.22
CPE:
cpe:2.3:a:drupal:drupal:6.22:*:*:*:*:*:*:*
drupal
Version:
7.36
CPE:
cpe:2.3:a:drupal:drupal:7.36:*:*:*:*:*:*:*
drupal
Version:
7.10
CPE:
cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*
drupal
Version:
4.5.6
CPE:
cpe:2.3:a:drupal:drupal:4.5.6:*:*:*:*:*:*:*
drupal
Version:
6.33
CPE:
cpe:2.3:a:drupal:drupal:6.33:*:*:*:*:*:*:*
drupal
Version:
8.0.4
CPE:
cpe:2.3:a:drupal:drupal:8.0.4:*:*:*:*:*:*:*
drupal
Version:
7.33
CPE:
cpe:2.3:a:drupal:drupal:7.33:*:*:*:*:*:*:*
drupal
Version:
7.52
CPE:
cpe:2.3:a:drupal:drupal:7.52:*:*:*:*:*:*:*
drupal
Version:
8.1.0
CPE:
cpe:2.3:a:drupal:drupal:8.1.0:-:*:*:*:*:*:*
drupal
Version:
7.2
CPE:
cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*
drupal
Version:
5.13
CPE:
cpe:2.3:a:drupal:drupal:5.13:*:*:*:*:*:*:*
drupal
Version:
4.1.0
CPE:
cpe:2.3:a:drupal:drupal:4.1.0:*:*:*:*:*:*:*
drupal
Version:
7.39
CPE:
cpe:2.3:a:drupal:drupal:7.39:*:*:*:*:*:*:*
drupal
Version:
4.7.1
CPE:
cpe:2.3:a:drupal:drupal:4.7.1:*:*:*:*:*:*:*
drupal
Version:
6.38
CPE:
cpe:2.3:a:drupal:drupal:6.38:*:*:*:*:*:*:*
drupal
Version:
6.5
CPE:
cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*
drupal
Version:
4.6.4
CPE:
cpe:2.3:a:drupal:drupal:4.6.4:*:*:*:*:*:*:*
drupal
Version:
8.1.8
CPE:
cpe:2.3:a:drupal:drupal:8.1.8:*:*:*:*:*:*:*
drupal
Version:
4.7.8
CPE:
cpe:2.3:a:drupal:drupal:4.7.8:*:*:*:*:*:*:*
drupal
Version:
5.14
CPE:
cpe:2.3:a:drupal:drupal:5.14:*:*:*:*:*:*:*
drupal
Version:
7.29
CPE:
cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:*
drupal
Version:
4.2.0
CPE:
cpe:2.3:a:drupal:drupal:4.2.0:*:*:*:*:*:*:*
drupal
Version:
4.7.4
CPE:
cpe:2.3:a:drupal:drupal:4.7.4:*:*:*:*:*:*:*
drupal
Version:
5.8
CPE:
cpe:2.3:a:drupal:drupal:5.8:*:*:*:*:*:*:*
drupal
Version:
4.7.10
CPE:
cpe:2.3:a:drupal:drupal:4.7.10:*:*:*:*:*:*:*
drupal
Version:
7.54
CPE:
cpe:2.3:a:drupal:drupal:7.54:*:*:*:*:*:*:*
drupal
Version:
6.32
CPE:
cpe:2.3:a:drupal:drupal:6.32:*:*:*:*:*:*:*
drupal
Version:
5.20
CPE:
cpe:2.3:a:drupal:drupal:5.20:*:*:*:*:*:*:*
drupal
Version:
5.7
CPE:
cpe:2.3:a:drupal:drupal:5.7:*:*:*:*:*:*:*
drupal
Version:
7.15
CPE:
cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*
drupal
Version:
4.6.7
CPE:
cpe:2.3:a:drupal:drupal:4.6.7:*:*:*:*:*:*:*
drupal
Version:
5.18
CPE:
cpe:2.3:a:drupal:drupal:5.18:*:*:*:*:*:*:*
drupal
Version:
5.19
CPE:
cpe:2.3:a:drupal:drupal:5.19:*:*:*:*:*:*:*
drupal
Version:
6.4
CPE:
cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*
drupal
Version:
8.0.5
CPE:
cpe:2.3:a:drupal:drupal:8.0.5:*:*:*:*:*:*:*
drupal
Version:
6.2
CPE:
cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*
drupal
Version:
7.22
CPE:
cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:*
drupal
Version:
5.11
CPE:
cpe:2.3:a:drupal:drupal:5.11:*:*:*:*:*:*:*
drupal
Version:
4.4.2
CPE:
cpe:2.3:a:drupal:drupal:4.4.2:*:*:*:*:*:*:*
drupal
Version:
4.5.8
CPE:
cpe:2.3:a:drupal:drupal:4.5.8:*:*:*:*:*:*:*
drupal
Version:
4.6.9
CPE:
cpe:2.3:a:drupal:drupal:4.6.9:*:*:*:*:*:*:*
drupal
Version:
4.3.0
CPE:
cpe:2.3:a:drupal:drupal:4.3.0:*:*:*:*:*:*:*
drupal
Version:
7.25
CPE:
cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:*
drupal
Version:
8.0.6
CPE:
cpe:2.3:a:drupal:drupal:8.0.6:*:*:*:*:*:*:*
drupal
Version:
4.5.7
CPE:
cpe:2.3:a:drupal:drupal:4.5.7:*:*:*:*:*:*:*
drupal
Version:
8.3.5
CPE:
cpe:2.3:a:drupal:drupal:8.3.5:*:*:*:*:*:*:*
drupal
Version:
8.2.7
CPE:
cpe:2.3:a:drupal:drupal:8.2.7:*:*:*:*:*:*:*
drupal
Version:
4.5.4
CPE:
cpe:2.3:a:drupal:drupal:4.5.4:*:*:*:*:*:*:*
drupal
Version:
6.27
CPE:
cpe:2.3:a:drupal:drupal:6.27:*:*:*:*:*:*:*
drupal
Version:
5.3
CPE:
cpe:2.3:a:drupal:drupal:5.3:*:*:*:*:*:*:*
drupal
Version:
8.1.9
CPE:
cpe:2.3:a:drupal:drupal:8.1.9:*:*:*:*:*:*:*
drupal
Version:
6.13
CPE:
cpe:2.3:a:drupal:drupal:6.13:*:*:*:*:*:*:*
drupal
Version:
4.4.3
CPE:
cpe:2.3:a:drupal:drupal:4.4.3:*:*:*:*:*:*:*
drupal
Version:
7.34
CPE:
cpe:2.3:a:drupal:drupal:7.34:*:*:*:*:*:*:*
drupal
Version:
5.2
CPE:
cpe:2.3:a:drupal:drupal:5.2:*:*:*:*:*:*:*
drupal
Version:
7.28
CPE:
cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:*
drupal
Version:
7.16
CPE:
cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*
drupal
Version:
7.1
CPE:
cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*
drupal
Version:
4.7.2
CPE:
cpe:2.3:a:drupal:drupal:4.7.2:*:*:*:*:*:*:*
drupal
Version:
8.2.3
CPE:
cpe:2.3:a:drupal:drupal:8.2.3:*:*:*:*:*:*:*
drupal
Version:
8.2.4
CPE:
cpe:2.3:a:drupal:drupal:8.2.4:*:*:*:*:*:*:*
drupal
Version:
4.0.0
CPE:
cpe:2.3:a:drupal:drupal:4.0.0:*:*:*:*:*:*:*
drupal
Version:
7.30
CPE:
cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:*
drupal
Version:
7.13
CPE:
cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*
drupal
Version:
8.3.3
CPE:
cpe:2.3:a:drupal:drupal:8.3.3:*:*:*:*:*:*:*
drupal
Version:
7.14
CPE:
cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*
drupal
Version:
8.2.6
CPE:
cpe:2.3:a:drupal:drupal:8.2.6:*:*:*:*:*:*:*
drupal
Version:
7.31
CPE:
cpe:2.3:a:drupal:drupal:7.31:*:*:*:*:*:*:*
drupal
Version:
8.3.2
CPE:
cpe:2.3:a:drupal:drupal:8.3.2:*:*:*:*:*:*:*
drupal
Version:
4.7.6
CPE:
cpe:2.3:a:drupal:drupal:4.7.6:*:*:*:*:*:*:*
drupal
Version:
6.35
CPE:
cpe:2.3:a:drupal:drupal:6.35:*:*:*:*:*:*:*
drupal
Version:
7.37
CPE:
cpe:2.3:a:drupal:drupal:7.37:*:*:*:*:*:*:*
drupal
Version:
7.17
CPE:
cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*
drupal
Version:
7.19
CPE:
cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:*
drupal
Version:
6.36
CPE:
cpe:2.3:a:drupal:drupal:6.36:*:*:*:*:*:*:*
drupal
Version:
6.19
CPE:
cpe:2.3:a:drupal:drupal:6.19:*:*:*:*:*:*:*
drupal
Version:
4.6.5
CPE:
cpe:2.3:a:drupal:drupal:4.6.5:*:*:*:*:*:*:*
drupal
Version:
8.2.8
CPE:
cpe:2.3:a:drupal:drupal:8.2.8:*:*:*:*:*:*:*
drupal
Version:
4.7.11
CPE:
cpe:2.3:a:drupal:drupal:4.7.11:*:*:*:*:*:*:*
drupal
Version:
7.12
CPE:
cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*
drupal
Version:
8.3.0
CPE:
cpe:2.3:a:drupal:drupal:8.3.0:-:*:*:*:*:*:*
drupal
Version:
4.4.0
CPE:
cpe:2.3:a:drupal:drupal:4.4.0:*:*:*:*:*:*:*
drupal
Version:
4.2.0_rc
CPE:
cpe:2.3:a:drupal:drupal:4.2.0_rc:*:*:*:*:*:*:*
drupal
Version:
4.6.6
CPE:
cpe:2.3:a:drupal:drupal:4.6.6:*:*:*:*:*:*:*
drupal
Version:
8.3.1
CPE:
cpe:2.3:a:drupal:drupal:8.3.1:*:*:*:*:*:*:*
drupal
Version:
8.3.4
CPE:
cpe:2.3:a:drupal:drupal:8.3.4:*:*:*:*:*:*:*
drupal
Version:
5.9
CPE:
cpe:2.3:a:drupal:drupal:5.9:*:*:*:*:*:*:*
drupal
Version:
6.23
CPE:
cpe:2.3:a:drupal:drupal:6.23:*:*:*:*:*:*:*
drupal
Version:
7.55
CPE:
cpe:2.3:a:drupal:drupal:7.55:*:*:*:*:*:*:*
drupal
Version:
7.20
CPE:
cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:*
drupal
Version:
7.18
CPE:
cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*
drupal
Version:
4.4
CPE:
cpe:2.3:a:drupal:drupal:4.4:*:*:*:*:*:*:*
drupal
Version:
8.1.1
CPE:
cpe:2.3:a:drupal:drupal:8.1.1:*:*:*:*:*:*:*
drupal
Version:
8.4.4
CPE:
cpe:2.3:a:drupal:drupal:8.4.4:*:*:*:*:*:*:*
drupal
Version:
5.17
CPE:
cpe:2.3:a:drupal:drupal:5.17:*:*:*:*:*:*:*
drupal
Version:
6.12
CPE:
cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*
drupal
Version:
7.40
CPE:
cpe:2.3:a:drupal:drupal:7.40:*:*:*:*:*:*:*
drupal
Version:
8.1.6
CPE:
cpe:2.3:a:drupal:drupal:8.1.6:*:*:*:*:*:*:*
drupal
Version:
6.3
CPE:
cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*
drupal
Version:
6.10
CPE:
cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*
drupal
Version:
6.16
CPE:
cpe:2.3:a:drupal:drupal:6.16:*:*:*:*:*:*:*
drupal
Version:
4.4.1
CPE:
cpe:2.3:a:drupal:drupal:4.4.1:*:*:*:*:*:*:*
drupal
Version:
4.0
CPE:
cpe:2.3:a:drupal:drupal:4.0:*:*:*:*:*:*:*
drupal
Version:
6.25
CPE:
cpe:2.3:a:drupal:drupal:6.25:*:*:*:*:*:*:*
drupal
Version:
8.4.0
CPE:
cpe:2.3:a:drupal:drupal:8.4.0:-:*:*:*:*:*:*
drupal
Version:
4.7.7
CPE:
cpe:2.3:a:drupal:drupal:4.7.7:*:*:*:*:*:*:*
drupal
Version:
4.6.1
CPE:
cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*
drupal
Version:
6.6
CPE:
cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*
drupal
Version:
7.6
CPE:
cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*
This vulnerability affects 214 software configuration(s). Ensure you patch all affected systems.
References & Resources
-
http://www.securityfocus.com/bid/103534mlhess@drupal.org Broken Link Third Party Advisory VDB Entry
-
http://www.securitytracker.com/id/1040598mlhess@drupal.org Broken Link Third Party Advisory VDB Entry
-
https://badpackets.net/over-100000-drupal-websites-vulnerable-to-drupalgeddon-2-cve-2018-7600/mlhess@drupal.org Broken Link Third Party Advisory
-
https://blog.appsecco.com/remote-code-execution-with-drupal-core-sa-core-2018-002-95e6ecc0c714mlhess@drupal.org Third Party Advisory
-
https://github.com/a2u/CVE-2018-7600mlhess@drupal.org Third Party Advisory
-
https://github.com/g0rx/CVE-2018-7600-Drupal-RCEmlhess@drupal.org Patch Third Party Advisory
-
https://greysec.net/showthread.php?tid=2912&pid=10561mlhess@drupal.org Broken Link Issue Tracking Third Party Advisory
-
https://groups.drupal.org/security/faq-2018-002mlhess@drupal.org Vendor Advisory
-
https://lists.debian.org/debian-lts-announce/2018/03/msg00028.htmlmlhess@drupal.org Third Party Advisory
-
https://research.checkpoint.com/uncovering-drupalgeddon-2/mlhess@drupal.org Exploit Third Party Advisory
-
https://twitter.com/RicterZ/status/979567469726613504mlhess@drupal.org Broken Link Third Party Advisory
-
https://twitter.com/RicterZ/status/984495201354854401mlhess@drupal.org Broken Link Third Party Advisory
-
https://twitter.com/arancaytar/status/979090719003627521mlhess@drupal.org Third Party Advisory
-
https://www.debian.org/security/2018/dsa-4156mlhess@drupal.org Third Party Advisory
-
https://www.drupal.org/sa-core-2018-002mlhess@drupal.org Vendor Advisory
-
https://www.exploit-db.com/exploits/44448/mlhess@drupal.org Exploit Third Party Advisory VDB Entry
-
https://www.exploit-db.com/exploits/44449/mlhess@drupal.org Exploit Third Party Advisory VDB Entry
-
https://www.exploit-db.com/exploits/44482/mlhess@drupal.org Exploit Third Party Advisory VDB Entry
-
https://www.synology.com/support/security/Synology_SA_18_17mlhess@drupal.org Third Party Advisory
-
https://www.tenable.com/blog/critical-drupal-core-vulnerability-what-you-need-to-knowmlhess@drupal.org Third Party Advisory
-
http://www.securityfocus.com/bid/103534af854a3a-2127-422b-91ae-364da2661108 Broken Link Third Party Advisory VDB Entry
-
http://www.securitytracker.com/id/1040598af854a3a-2127-422b-91ae-364da2661108 Broken Link Third Party Advisory VDB Entry
-
https://badpackets.net/over-100000-drupal-websites-vulnerable-to-drupalgeddon-2-cve-2018-7600/af854a3a-2127-422b-91ae-364da2661108 Broken Link Third Party Advisory
-
https://blog.appsecco.com/remote-code-execution-with-drupal-core-sa-core-2018-002-95e6ecc0c714af854a3a-2127-422b-91ae-364da2661108 Third Party Advisory
-
https://github.com/a2u/CVE-2018-7600af854a3a-2127-422b-91ae-364da2661108 Third Party Advisory
-
https://github.com/g0rx/CVE-2018-7600-Drupal-RCEaf854a3a-2127-422b-91ae-364da2661108 Patch Third Party Advisory
-
https://greysec.net/showthread.php?tid=2912&pid=10561af854a3a-2127-422b-91ae-364da2661108 Broken Link Issue Tracking Third Party Advisory
-
https://groups.drupal.org/security/faq-2018-002af854a3a-2127-422b-91ae-364da2661108 Vendor Advisory
-
https://lists.debian.org/debian-lts-announce/2018/03/msg00028.htmlaf854a3a-2127-422b-91ae-364da2661108 Third Party Advisory
-
https://research.checkpoint.com/uncovering-drupalgeddon-2/af854a3a-2127-422b-91ae-364da2661108 Exploit Third Party Advisory
-
https://twitter.com/RicterZ/status/979567469726613504af854a3a-2127-422b-91ae-364da2661108 Broken Link Third Party Advisory
-
https://twitter.com/RicterZ/status/984495201354854401af854a3a-2127-422b-91ae-364da2661108 Broken Link Third Party Advisory
-
https://twitter.com/arancaytar/status/979090719003627521af854a3a-2127-422b-91ae-364da2661108 Third Party Advisory
-
https://www.debian.org/security/2018/dsa-4156af854a3a-2127-422b-91ae-364da2661108 Third Party Advisory
-
https://www.drupal.org/sa-core-2018-002af854a3a-2127-422b-91ae-364da2661108 Vendor Advisory
-
https://www.exploit-db.com/exploits/44448/af854a3a-2127-422b-91ae-364da2661108 Exploit Third Party Advisory VDB Entry
-
https://www.exploit-db.com/exploits/44449/af854a3a-2127-422b-91ae-364da2661108 Exploit Third Party Advisory VDB Entry
-
https://www.exploit-db.com/exploits/44482/af854a3a-2127-422b-91ae-364da2661108 Exploit Third Party Advisory VDB Entry
-
https://www.synology.com/support/security/Synology_SA_18_17af854a3a-2127-422b-91ae-364da2661108 Third Party Advisory
-
https://www.tenable.com/blog/critical-drupal-core-vulnerability-what-you-need-to-knowaf854a3a-2127-422b-91ae-364da2661108 Third Party Advisory
-
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7600134c704f-9b21-4f2e-91b3-4a467353bcc0 US Government Resource
Severity Details
9.8
out of 10.0
Critical
CISA KEV Status
Active Exploitation
Listed in CISA's Known Exploited Vulnerabilities catalog
Weakness Type (CWE)
CWE-20
Top 25 #14
Improper Input Validation
- Description
- The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
- Exploit Likelihood
- High
- Typical Severity
- High
- Abstraction Level
- Class
Key Information
- Published Date
- March 29, 2018
