Exploit for Drupal REST module command execution

## https://sploitus.com/exploit?id=SAINT:D0B55FEC01E893C8CF308C97AB9F6F53
Added: 02/27/2019  
CVE: [CVE-2019-6340](<https://vulners.com/cve/CVE-2019-6340>)  
BID: [107106](<http://www.securityfocus.com/bid/107106>)  


### Background

[Drupal](<https://www.drupal.org/>) is an open-source content management system written in PHP. 

### Problem

The Drupal REST module does not properly sanitize input from non-form sources, allowing an attacker to execute arbitrary code. 

### Resolution

[Upgrade](<https://www.drupal.org/project/drupal/releases/>) to Drupal 8.5.11 or 8.6.10 or higher. 

### References

<https://www.drupal.org/sa-core-2019-003>  


### Platforms

Linux