Drupal Remote Code Execution vulnerability exploited widely

Re:Drupal Remote Code Execution vulnerability exploited widely by reza_n on Thursday April 26, 2018 @06:06AM (#16930487)

Is there some pattern or rule you can put into Varnish/CDN/nginx to prevent this??

[ Parent | on HN ]

Re:Drupal Remote Code Execution vulnerability exploited widely by mgbmtl on Thursday April 26, 2018 @08:42AM (#16931308)

Here is what Aegir/BOA uses:

https://www.drupal.org/project/provision/issues/2960825

https://cgit.drupalcode.org/provision/commit/?id=638b03d

[ Parent | on HN ]

Re:Drupal Remote Code Execution vulnerability exploited widely by Jgrubb on Thursday April 26, 2018 @06:27AM (#16930588)

You really need a Layer 7 kind of thing to be able to inspect the actual payload of the request. I don't think any of those can do that. You'd need an actual WAF.

[ Parent | on HN ]

Re:Drupal Remote Code Execution vulnerability exploited widely by krehl on Thursday April 26, 2018 @06:56AM (#16930751)

Cloudflare was able to protect against Drupalgeddon 2

https://blog.cloudflare.com/keeping-drupal-sites-safe-with-c...

[ Parent | on HN ]

Re:Drupal Remote Code Execution vulnerability exploited widely by Jgrubb on Friday April 27, 2018 @09:05AM (#16940485)

That's a WAF layer though. I don't know of a way to do this with Varnish or a straight CDN.

[ Parent | on HN ]