CVE-2018-7602 Drupal Core
A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site.
- CVSS
- not scored
On CISA’s exploited list
Drupal Core Remote Code Execution Vulnerability
- Added
- 2022-04-13
- Federal patch deadline
- 2022-05-04
- Ransomware use
- known