PT-2018-18169 · Drupal+1 · Drupal+1

Blaklis + 1 · Publicado 2018-04-25 · Atualizado 2025-08-27 · CVE-2018-7602

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Drupal versions 7.x through 8.x

Description A remote code execution issue exists within multiple subsystems of Drupal. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. The issue is related to Drupal core and is being exploited in the wild.

Recommendations For versions 7.x and 8.x, update to a version that includes the fix for this issue to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

BDU:2026-04575

CVE-2018-7602

DLA-1365-1

DRUPAL-CORE-2018-004

DSA-4180-1

GHSA-297X-J9PM-XJGG

USN-4773-1

Produtos afetados

Drupal

Ubuntu

Referências · 32

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2018-7602.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2018-7602.yaml · Exploit
• 🔥 https://github.com/1337g/Drupalgedon3 · Exploit
• 🔥 https://exploit-db.com/exploits/44542 · Exploit
• 🔥 https://exploit-db.com/exploits/44557 · Exploit
• https://github.com/drupal/core · Nota
• https://t.me/cvenotify/114882 · Publicação no Telegram
• https://drupal.org/sa-core-2018-004 · Aviso do Fabricante
• https://lists.debian.org/debian-security-announce/2018/msg00107.html · Nota
• https://debian.org/security/2018/dsa-4180 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2018-7602 · Nota de Segurança
• https://osv.dev/vulnerability/DSA-4180-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-7602 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-04575 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-4773-1 · Aviso do Fabricante