A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple a...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the wild.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Ubuntu:Pro:14.04:LTS drupal7

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.26-1ubuntu0.1+esm1"}]}]

Ubuntu:Pro:16.04:LTS drupal7

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.44-1ubuntu1~16.04.0+esm1"}]}]

参照URL

advisory ubuntu.com
report ubuntu.com
report drupal.org
report cve.org
report cisa.gov