Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-6919

Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the site allows PATCH requests.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 6.0
Products affected by CVE-2017-6919
  • Drupal » Drupal » Version: 8.0.0
    cpe:2.3:a:drupal:drupal:8.0.0
  • Drupal » Drupal » Version: 8.0.1
    cpe:2.3:a:drupal:drupal:8.0.1
  • Drupal » Drupal » Version: 8.0.2
    cpe:2.3:a:drupal:drupal:8.0.2
  • Drupal » Drupal » Version: 8.0.3
    cpe:2.3:a:drupal:drupal:8.0.3
  • Drupal » Drupal » Version: 8.0.4
    cpe:2.3:a:drupal:drupal:8.0.4
  • Drupal » Drupal » Version: 8.0.5
    cpe:2.3:a:drupal:drupal:8.0.5
  • Drupal » Drupal » Version: 8.0.6
    cpe:2.3:a:drupal:drupal:8.0.6
  • Drupal » Drupal » Version: 8.1.0
    cpe:2.3:a:drupal:drupal:8.1.0
  • Drupal » Drupal » Version: 8.1.1
    cpe:2.3:a:drupal:drupal:8.1.1
  • Drupal » Drupal » Version: 8.1.10
    cpe:2.3:a:drupal:drupal:8.1.10
  • Drupal » Drupal » Version: 8.1.2
    cpe:2.3:a:drupal:drupal:8.1.2
  • Drupal » Drupal » Version: 8.1.3
    cpe:2.3:a:drupal:drupal:8.1.3
  • Drupal » Drupal » Version: 8.1.4
    cpe:2.3:a:drupal:drupal:8.1.4
  • Drupal » Drupal » Version: 8.1.5
    cpe:2.3:a:drupal:drupal:8.1.5
  • Drupal » Drupal » Version: 8.1.6
    cpe:2.3:a:drupal:drupal:8.1.6
  • Drupal » Drupal » Version: 8.1.7
    cpe:2.3:a:drupal:drupal:8.1.7
  • Drupal » Drupal » Version: 8.1.8
    cpe:2.3:a:drupal:drupal:8.1.8
  • Drupal » Drupal » Version: 8.1.9
    cpe:2.3:a:drupal:drupal:8.1.9
  • Drupal » Drupal » Version: 8.2.0
    cpe:2.3:a:drupal:drupal:8.2.0
  • Drupal » Drupal » Version: 8.2.1
    cpe:2.3:a:drupal:drupal:8.2.1
  • Drupal » Drupal » Version: 8.2.2
    cpe:2.3:a:drupal:drupal:8.2.2
  • Drupal » Drupal » Version: 8.2.3
    cpe:2.3:a:drupal:drupal:8.2.3
  • Drupal » Drupal » Version: 8.2.4
    cpe:2.3:a:drupal:drupal:8.2.4
  • Drupal » Drupal » Version: 8.2.5
    cpe:2.3:a:drupal:drupal:8.2.5
  • Drupal » Drupal » Version: 8.2.6
    cpe:2.3:a:drupal:drupal:8.2.6
  • Drupal » Drupal » Version: 8.2.7
    cpe:2.3:a:drupal:drupal:8.2.7
  • Drupal » Drupal » Version: 8.3.0
    cpe:2.3:a:drupal:drupal:8.3.0


Contact Us

Shodan ® - All rights reserved