Lucene search

[email protected]CVE-2019-6340

HistoryFeb 21, 2019 - 9:29 p.m.

CVE-2019-6340

2019-02-2121:29:00

CWE-502

[email protected]

web.nvd.nist.gov

988

In Wild

cve

2019

6340

drupal

data sanitization

php

code execution

security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

JSON

Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases. A site is only affected by this if one of the following conditions is met: The site has the Drupal 8 core RESTful Web Services (rest) module enabled and allows PATCH or POST requests, or the site has another web services module enabled, like JSON:API in Drupal 8, or Services or RESTful Web Services in Drupal 7. (Note: The Drupal 7 Services module itself does not require an update at this time, but you should apply other contributed updates associated with this advisory if Services is in use.)

Affected configurations

NVD

Node

drupaldrupalRange8.5.0–8.5.11

drupaldrupalRange8.6.0–8.6.10

CPENameOperatorVersion
drupal:drupaldrupallt8.5.11
drupal:drupaldrupallt8.6.10

CPE	Name	Operator	Version
drupal:drupal	drupal	lt	8.5.11
drupal:drupal	drupal	lt	8.6.10

CNA Affected

[
  {
    "product": "Drupal Core",
    "vendor": "Drupal",
    "versions": [
      {
        "lessThan": "8.5.11",
        "status": "affected",
        "version": "8.5",
        "versionType": "custom"
      },
      {
        "lessThan": "8.6.10",
        "status": "affected",
        "version": "8.6",
        "versionType": "custom"
      }
    ]
  }
]