Drupal core Remote Code Execution - SA-CORE-2018-002
Posted: Thu Mar 29, 2018 7:06 pm
ASL, Reverse Proxy and modsecurity rules customers were already protected from SA-CORE-2018-002 via our generic protection modsecurity rules. We've also added a specific rule so that users will know if this specific attack is being directed at their systems. The rule number is 390755.
There is no need to update to be protected from this attack. However, if you wish to notified of this specific attack, as opposed to being notified of a general attack, update to the latest modsecurity rules.
There is no need to update to be protected from this attack. However, if you wish to notified of this specific attack, as opposed to being notified of a general attack, update to the latest modsecurity rules.