CVE-2017-6381: falha em Drupal Core
Publicada em · Atualizada em
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.9%
probabilidade de exploração
3.9%top 10% das CVEs
exploração observada
nãonenhuma fonte reporta
A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies aren't normal installed. You might be vulnerable to this if you are running a version of Drupal before 8.2.2. To be sure you aren't vulnerable, you can remove the <siteroot>/vendor/phpunit directory from your production deployments
Produtos afetados
Drupal · Drupal CoreCVEs relacionadas — Drupal Core
No mesmo produto, das mais perigosas para as menos.
CVE-2019-6340HIGHDrupal core - Highly critical - Remote Code ExecutionEPSS 92.0%KEVCVE-2020-13671HIGHCVE-2020-13671EPSS 35.4%KEVCVE-2020-13664—CVE-2020-13664EPSS 3.0%CVE-2020-13666—CVE-2020-13666EPSS 2.9%CVE-2019-6342—Drupal core - Critical - Access bypass - SA-CORE-2019-008EPSS 2.2%CVE-2017-6924—REST API can bypass comment approval - Access Bypass - Moderately CriticalEPSS 2.1%