Drupal-cve-2019-6340

Research CVE 2019-6340 root@kitploit: The site as Drupal 8 core RESTful API Services module gets enabled and allows the user to send GET, PATCH or POST Request to the server. GET request is enough to trigger the code execution vulnerability even though PATCH method is disabled The site has any...