Threat Advisories - NVD Disclosed March 29, 2018

CVE-2018-7600

Drupal Core Remote Code Execution Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

Drupal versions are affected by a remote code execution vulnerability impacting multiple subsystems. This could allow attackers to compromise entire websites and their data. The business risk is high due to potential unauthorized code execution.

NVD published: March 29, 2018 • CISA KEV