Vendor / Project: Drupal Product: Drupal Core Description: Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal site, resulting in complete site compromise. Required Action: Apply updates per vendor instructions. Due Date: 2022-05-03 Ransomware Campaign Use: Known CWEs: CWE-20 Notes: https://nvd.nist.gov/vuln/detail/CVE-2018-7600