Tag

drupalgeddon2

Safeguard articles tagged "drupalgeddon2" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Drupalgeddon2 (CVE-2018-7600) Explained: Drupal's Form API RCE

CVE-2018-7600, known as Drupalgeddon2, is a CVSS 9.8 unauthenticated remote code execution flaw in Drupal core's Form API. Here is how the renderable-array bug works and which versions to run.

Jul 3, 20266 min read