onyx --cves cve-2019-6340
CVE-2019-6340
- score
- <0.1
- cvss
- —
- epss
- 92.0%
- published
- —
- kev added
- 2022-03-25
- first seen
In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Added to CISA KEV
- Tracked by Onyx
- Nuclei template Drupal - Remote Code Execution
Nuclei template
A verified check exists — you can scan for this today, and so can everyone else.
- template
- Drupal - Remote Code Execution
- severity
- HIGH
- first seen
nuclei -id CVE-2019-6340 -u https://target.example