PULSE
FEED
← Todos os CVEs
CVE Watch—

CVE-2019-6340

Drupal Core Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

92.0%

p100

KEV

SIM

25 de mar. de 2022

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
92.0%EPSS · 30 dias92.0%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Drupal / Core

Vulnerabilidade

Drupal Core Remote Code Execution Vulnerability

Adicionado ao KEV

25 de mar. de 2022

Corrigir até

15 de abr. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2019-6340

CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-90829.8 CRÍ
99.8%
KEV—80Drupal Core SQL Injection Vulnerability29d
CVE-2018-76029.8 CRÍ
99.9%
KEV—80Drupal Core Remote Code Execution Vulnerability34d