- https://www.drupal.org/project/drupal/releases/8.4.8

    - https://www.drupal.org/SA-CORE-2018-004

- https://www.drupal.org/project/drupal/releases/8.4.7

    - https://www.drupal.org/sa-core-2018-003

RPM update: `drupal8-rpmbuild` package dependencies fixed

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

在功能完善的內容管理架構 Drupal 中發現一個遠端程式碼執行弱點。如需其他資訊，請參閱上游公告：https://www.drupal.org/sa-core-2018-004

在 Drupal 的多個子系統中發現一個遠端程式碼執行弱點。攻擊者有可能利用 Drupal 網站上的多個攻擊向量，導致網站遭到入侵。針對 Debian 7「Wheezy」，這些問題已在 7.14-2+deb7u19 版本中修正。我們建議您升級 drupal7 套件。注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

在功能完善的内容管理框架 Drupal 中发现一个远程代码执行漏洞。如需其他信息，请参阅上游公告：https://www.drupal.org/sa-core-2018-004

在 Drupal 的多个子系统中发现一个远程代码执行漏洞。此漏洞可能允许攻击者利用 Drupal 站点上的多个攻击向量，可能导致该站点遭到破坏。对于 Debian 7“Wheezy”，这些问题已在 7.14-2+deb7u19 版本中修复。我们建议您升级 drupal7 程序包。注意：Tenable Network Security 已直接从 DLA 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动整理和排版。

-https://www.drupal.org/project/drupal/releases/8.4.8

    -https://www.drupal.org/SA-CORE-2018-004

-https://www.drupal.org/project/drupal/releases/8.4.7

    -https://www.drupal.org/sa-core-2018-003

RPMの更新：`drupal8-rpmbuild`パッケージの依存関係が修正されました

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

-https://www.drupal.org/project/drupal/releases/7.59

    -https://www.drupal.org/SA-CORE-2018-004

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

The version of Drupal installed on the remote server is 7.x prior to 7.58, and is affected by a flaw in the 'preHandle()' function in 'core/lib/Drupal/Core/DrupalKernel.php' that is triggered as certain parameter keys within HTTP requests are not properly sanitized. This may allow a remote attacker to execute arbitrary code. This issue may be exploited using multiple unspecified attack vectors.

The version of Drupal installed on the remote server is 8.x prior to 8.3.9, and is affected by a flaw in the 'preHandle()' function in 'core/lib/Drupal/Core/DrupalKernel.php' that is triggered as certain parameter keys within HTTP requests are not properly sanitized. This may allow a remote attacker to execute arbitrary code. This issue may be exploited using multiple unspecified attack vectors.

The version of Drupal installed on the remote server is 8.4.x prior to 8.4.6, and is affected by a flaw in the 'preHandle()' function in 'core/lib/Drupal/Core/DrupalKernel.php' that is triggered as certain parameter keys within HTTP requests are not properly sanitized. This may allow a remote attacker to execute arbitrary code. This issue may be exploited using multiple unspecified attack vectors.

The version of Drupal installed on the remote server is 8.5.x prior to 8.5.1, and is affected by a flaw in the 'preHandle()' function in 'core/lib/Drupal/Core/DrupalKernel.php' that is triggered as certain parameter keys within HTTP requests are not properly sanitized. This may allow a remote attacker to execute arbitrary code. This issue may be exploited using multiple unspecified attack vectors.

ID	名稱	產品	系列	已發布	已更新	嚴重性
120613	Fedora 28 : drupal8 (2018-8fd924a53d) (Drupalgeddon 2)	Nessus	Fedora Local Security Checks	2019/1/3	2022/4/22	critical
109349	Debian DSA-4180-1：drupal7 - 安全性更新 (Drupalgeddon 2)	Nessus	Debian Local Security Checks	2018/4/26	2022/4/26	critical
109381	Debian DLA-1365-1：drupal7 安全性更新 (Drupalgeddon 2)	Nessus	Debian Local Security Checks	2018/4/27	2022/4/22	critical
109349	Debian DSA-4180-1：drupal7 - 安全更新 (Drupalgeddon 2)	Nessus	Debian Local Security Checks	2018/4/26	2022/4/26	critical
109381	Debian DLA-1365-1：drupal7 安全更新 (Drupalgeddon 2)	Nessus	Debian Local Security Checks	2018/4/27	2022/4/22	critical
109705	Fedora 27：drupal8（2018-1ba93b3144）（Drupalgeddon 2）	Nessus	Fedora Local Security Checks	2018/5/11	2022/4/22	critical
109706	Fedora 26：drupal7（2018-2359c2ae0e）（Drupalgeddon 2）	Nessus	Fedora Local Security Checks	2018/5/11	2022/4/22	critical
120613	Fedora 28：drupal8（2018-8fd924a53d）（Drupalgeddon 2）	Nessus	Fedora Local Security Checks	2019/1/3	2022/4/22	critical
700224	Drupal 7.x < 7.58 RCE	Nessus Network Monitor	CGI	2018/3/29	2019/3/6	critical
700228	Drupal 8.x < 8.3.9 RCE	Nessus Network Monitor	CGI	2018/3/29	2019/3/6	critical
700229	Drupal 8.4.x < 8.4.6 RCE	Nessus Network Monitor	CGI	2018/3/29	2019/3/6	critical
700230	Drupal 8.5.x < 8.5.1 RCE	Nessus Network Monitor	CGI	2018/3/29	2019/3/6	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical