Vulnerabilities fixed in Drupal Core

🗓️ 10 Dec 2024 19:35:37Reported by NCSCType

Drupal Core fixes privilege escalation and deserialization vulnerabilities across multiple versions; updates issued.

Reporter	Title	Published	Views	Family All 132
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel lies in the insufficient control over the modification of dynamically defined object properties, allowing attackers to execute arbitrary code.	11 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel lies in the insufficient control over the modification of dynamically defined object properties. This allows attackers to delete any file they desire.	11 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel lies in the insufficient control over the modification of dynamically defined object properties, allowing attackers to execute arbitrary code.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Drupal CMS system, related to insufficient protection of website structures, allows attackers to carry out XSS attacks.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel allows attackers to carry out XSS attacks.	12 Dec 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel allows attackers to enhance their privileges.	12 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-12393	9 Dec 202423:28	–	circl
Circl	CVE-2024-55634	9 Dec 202423:28	–	circl
Circl	CVE-2024-55635	9 Dec 202423:28	–	circl

Vulners

Node

drupal drupalMatch10.2.10

10 Dec 2024 19:35Current

9.7High risk

Vulners AI Score9.7

CVSS 3.19.8

EPSS0.00956

SSVC