Known Exploited Vulnerabilities March 25, 2022 · CISA KEV Catalog

CVE-2019-6340: Drupal Core Remote Code Execution Vulnerability

In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2019-6340Drupal

Related

CVE-2026-9082: Drupal Core SQL Injection Vulnerability Known Exploited Vulnerabilities · May 22, 2026

CVE-2018-7602: Drupal Core Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Apr 13, 2022

CVE-2020-13671: Drupal core Un-restricted Upload of File Known Exploited Vulnerabilities · Jan 18, 2022