Object Injection Vulnerability in Drupal Core

CVE-2025-31674

Summary

This vulnerability in Drupal core allows for improper control over the modification of dynamically-determined object attributes, leading to potential object injection attacks. Malicious users could exploit this issue to manipulate objects in a way that circumvents intended application logic, potentially compromising the security of the application. It is essential for users of affected Drupal versions to apply the necessary updates to mitigate potential risks.

References