Actively exploited in the wild
Drupal Core Remote Code Execution Vulnerability
Drupal - Core · Listed in the CISA KEV since 2022-04-13. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2018-7602
CriticalCVSS 9.8KEVExploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.
Risk Assessment
An attacker can fully compromise the Drupal site, potentially leading to data theft, defacement, or using the server for further attacks.
Recommendation
Immediately update Drupal to the latest available version that includes the fix for SA-CORE-2018-002. Check logs for signs of compromise.
Original NVD description (English source)
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.