CVE-2018-7602 log
| Source |
|
| Severity | Critical |
| Remote | Yes |
| Type | Arbitrary command execution |
| Description | A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-679 | drupal | 8.5.2-1 | 8.5.3-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 27 Apr 2018 | ASA-201804-10 | AVG-679 | drupal | Critical | arbitrary command execution |
| References |
|---|
https://www.drupal.org/sa-core-2018-004 https://github.com/drupal/drupal/commit/bb6d396609600d1169da29456ba3db59abae4b7e |