CVE-2017-9841: Drupal Sites Exploited Using PHPUnit Vulnerability in Mailchimp Modules (PSA-2019-0904)
by Satnam Narang on September 5, 2019
Attackers are leveraging a vulnerability patched nearly three years ago to target Drupal sites.
Background
On September 4, Drupal published PSA-2019-09-04, a public service announcement (PSA) for a vulnerability in a third-party library in a Drupal module that’s being actively exploited in the wild.