Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.drupal.org/sa-core-2024-007 |
Configurations
No configuration.
History
10 Dec 2024, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-10 00:15
Updated : 2024-12-10 00:15
NVD link : CVE-2024-55637
Mitre link : CVE-2024-55637
CVE.ORG link : CVE-2024-55637
JSON object : View
Products Affected
No product.
CWE
CWE-915
Improperly Controlled Modification of Dynamically-Determined Object Attributes