Deserialization of Untrusted Data Vulnerability in Drupal Node Export
CVE-2024-13295

Currently unrated

Key Information:

Vendor

Drupal
Vendor
CVE Published:
9 January 2025

What is CVE-2024-13295?

A vulnerability in the Node export module of Drupal allows for deserialization of untrusted data, potentially leading to object injection attacks. This affects versions prior to 7.X-3.3, making it critical for users to update and secure their installations to prevent unauthorized access and manipulation of data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.drupal.org/sa-contrib-2024-061

Timeline

  • Vulnerability published

JSON
.