Skip to content
CVE PROGRAM SOURCE RECORD6.6 Medium

CVE-2024-13295

Node export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-061

Description

Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X-* before 7.X-3.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drupal Node export

Default version status: unaffected

  • 7.x-* to < 7.x-3.3affected

References