DevDungeon/CVE-2019-6340-Drupal-8.6.9-REST-Auth-Bypass

PoC

CVE-2019-6340 Drupal 8.6.9 REST Auth Bypass examples

view exploit source poc_in_githubauthor DevDungeonpublished 2019-02-25catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-6340UShigh8.1OT criticalKEV
Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan