Drupal

Reported Context (3)

Drupal is urging online store owners to patch a highly critical access bypass vulnerability in the Commerce Core module, warning that it is being exploited in the wild. Drupal Commerce Core Access Bypass Exploited in the Wild
Drupal warns of critical Commerce Core flaw exploited in attacks Drupal Warns of Actively Exploited Commerce Core Access Bypass
Drupal has rolled out patches for five vulnerabilities, including two critical-severity bugs that could be exploited for remote code execution (RCE). Drupal Patches Two Critical Core Flaws With Potential Unauthenticated RCE Paths

CVE (6)

MITRE ATT&CK (1)

Products (8)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.