H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2022-03-25
Last seen2022-03-25

Confidence

—

In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases.

Labels

exploitedkev

CISA KEV context

Vendor / productDrupal Core
Added2022-03-25
Due date2022-04-15
2 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2019-6340
open
cwe
CWE-502
open