Related Vulnerabilities: CVE-2018-7602  

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised.

Severity Critical

Remote Yes

Type Arbitrary command execution

Description

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised.

AVG-679 drupal 8.5.2-1 8.5.3-1 Critical Fixed

27 Apr 2018 ASA-201804-10 AVG-679 drupal Critical arbitrary command execution

https://www.drupal.org/sa-core-2018-004
https://github.com/drupal/drupal/commit/bb6d396609600d1169da29456ba3db59abae4b7e