Firetruck

CVE-2018-7602

KEV · Ransomware
Updated Oct 1, 2026 · PUBLISHED
View KEV entry →

Description

A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
coreDrupal / core>= unspecified, < 7.59affected
coreDrupal / core>= unspecified, < 8.5.3affected
coreDrupal / core>= unspecified, < 8.4.8affected