Drupal Drupalgeddon 2 RCE

The Drupal plugin system enables a module or subsystem to provide functionality in an object-oriented, extensible manner. Because of an issue affecting multiple subsystems with default or common module configurations, remote attackers can execute arbitrary code in Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1.

Mitigation / Precaution

In order to patch this vulnerability, please install the official patch Drupal made available for supported, vulnerable instances

Written by

Prathap

Co-founder, Director

Prathap has around 20 years of experience and has worked on various projects in leading companies like Hitachi, Toshiba, Schneider Electric, ABB, Panasonic, and MicroFuzzy. His expertise lies in architecting, designing, and developing secure projects covering various aspects of software development, processes, and methodology.