CVE-2017-6919

HIGH · CVSS 7.5 EPSS 1.61%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-04-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2017-6919

Severity

HIGH

CVSS

7.5

EPSS

1.61%

Original NVD Description

Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the site allows PATCH requests.