Exploit for cve-2019-6340-bits

kitploit · 2026-08-25

Description

RCE in Drupal RESTful Web Services module.

Entry point

Parameterlink · request body

Path/node

Drupal RESTful Web Services unserialize() RCE via crafted HAL JSON to /node

Affected Drupal versions

Drupal< 8.5.11, 8.6.10

All known vulnerabilities by product

CVSS 8.1 for CVE-2019-6340

8.1

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

References

https://github.com/josehelps/cve-2019-6340-bits/blob/HEAD/drupal_nginx.conf

https://github.com/josehelps/cve-2019-6340-bits/blob/HEAD/CVE-2019-6340.pcap

https://github.com/josehelps/cve-2019-6340-bits/blob/HEAD/logs

https://github.com/josehelps/cve-2019-6340-bits/blob/HEAD/modsec.rule

https://github.com/josehelps/cve-2019-6340-bits/blob/HEAD/playbook

Exploit Details

Modified:2026-08-25 09:13

Last Seen:2026-08-26 08:00

Reporter:KitPloit

Tags

DrupalRESTful Web Servicesremote code executionanalysismodsec ruleplaybook

Other exploits for CVE-2019-6340

2026-08-27 KitPloitKITPLOIT

Drupal-SA-CORE-2019-003

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

CVE-2019-6340-Drupal-8.6.9-REST-Auth-Bypass

2026-08-26 KitPloitKITPLOIT

Drupal-cve-2019-6340

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

Exploit Code

MARKDOWN10 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-JOSEHELPS-CVE-2019-6340-BITS
# cve-2019-6340-bits

Bits gerados durante a análise do CVE-2019-6340 Drupal RESTful RCE

  * regra modsec
  * pcap
  * exemplo de configuração nginx
  * exemplo de logs
  * exemplo de playbook