Vulnerabilitycritical

CVE-2019-6342 flaw allows hackers to compromise Drupal 8.7.4 websites

Security Affairsby @securityaffairsJul 18, 2019 · 09:34 UTC (Jul 18, 2019)1 min read1 · 1 read

Read at securityaffairs.com

Analyze CVE-2019-6342 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-6342 CVE-2019-6340

Tags: cve-2019-6342 cve-2019-6340 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-6340	Deserialization RCE in Drupal 8 Core Web Services (CVE-2019-6340)	8.1	92%	KEVPoC ×2	Feb 21, 2019 KEV Mar 25, 2022
CVE-2019-6342	An access bypass vulnerability exists when the experimental Workspaces module in Drupal 8 core is enabled	9.8	2%		May 28, 2020

From the original article

1 min read at securityaffairs.com

Drupal developers urge users to update their installs to version 8. 7. 5, which addresses the CVE-2019-6342 flaw that allows hackers to take control of Drupal 8 sites.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.