Drupal Drupal Remote Code Execution Vulnerability (CVE-2018-7600) Update ASAP

eva2000 · Mar 29, 2018

Not a Drupal user myself but came across the latest Drupal remode code execution vulnerability (CVE-2018-7600) which folks are suggestion Drupal users update ASAP Running Drupal? You need to patch, patch, patch right now!. Ouch !

Anyone running a website built with Drupal should stop whatever they are doing right now and install critical security patches.

The organization behind the open-source software today put out an urgent security patch to address a remote code execution vulnerability in "multiple subsystems" of its content management system software.

The holes could allow hackers to attack a Drupal-powered website in a number of different ways and that "could result in the site being completely compromised." In other words, it's really bad.

A hacker will be able to hack your site from any webpage, the Drupal project warned, and it doesn't require them to login or have any privileges, meaning that a completely anonymous miscreant can take over your vulnerable site as well as access, delete, and change non-public data.

There is no attack code circulating in the wild right now, but the Drupal bods have warned it could be a mere matter of hours before some is developed. Which means one thing: patch. And do it now.
Click to expand...

Log in / Register

Forums

Welcome to Centmin Mod Community

Drupal Drupal Remote Code Execution Vulnerability (CVE-2018-7600) Update ASAP

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Welcome to Centmin Mod Community

Drupal Drupal Remote Code Execution Vulnerability (CVE-2018-7600) Update ASAP

eva2000 Administrator Staff Member

.