exploit/unix/webapp/drupal_restws_unserialize

functional

Drupal RESTful Web Services unserialize() RCE

view exploit source metasploittype exploitpublished 2019-02-20catalog metasploit
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-6340UShigh8.1OT criticalKEV
Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan