Exploit / PoCcritical
Over 115,000 Drupal Sites still vulnerable to Drupalgeddon2, a gift to crooks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-7600 | Unauthenticated Remote Code Execution in Drupal Core (Drupalgeddon 2) | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | upgraderservices.cf | nt’s website in Belgium. This campaign uses the domain name upgraderservices[.]cf to inject Coinhive.” added the expert. The expert publish |
From the original article
2 min read at securityaffairs.com
Two months after the release of the security updates for the drupalgeddon2 flaw, experts continue to see vulnerable websites running on flawed versions of Drupal that hasn’t installed security patches. In March, the Drupal developers Jasper Mattsson discovered a “highly critical” vulnerability, tracked as CVE-2018-7600 , aka drupalgeddon2 , affecting Drupal 7 and 8 versions. Both Drupal 8.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.