{"cvss":0.0,"datePublished":"2019-12-27T00:00:00Z","dateUpdated":"2019-12-27T00:00:00Z","description":"In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases.","dueDate":"2022-04-15T00:00:00Z","id":"CVE-2019-6340","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"Drupal Core","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"vulncheck_kev","title":"Drupal Core Remote Code Execution Vulnerability","vendor":"Drupal"}