GHSA-GVF2-2F4G-JQF4 Drupal core contains a potential PHP Object Injection vulnerability

🗓️ 10 Dec 2024 00:31:27Reported by GoogleType

osv🔗 osv.dev👁 14 Views

Drupal core has a PHP Object Injection vulnerability that may lead to Remote Code Execution under specific conditions.

Reporter	Title	Published	Views	Family All 32
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel lies in the insufficient control over the modification of dynamically defined object properties, allowing attackers to execute arbitrary code.	12 Dec 202400:00	–	bdu_fstec
Circl	CVE-2024-55638	9 Dec 202423:43	–	circl
CNNVD	Drupal core 安全漏洞	10 Dec 202400:00	–	cnnvd
CVE	CVE-2024-55638	9 Dec 202423:26	–	cve
Cvelist	CVE-2024-55638 Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008	9 Dec 202423:26	–	cvelist
Drupal	Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008	20 Nov 202400:00	–	drupal
Tenable Nessus	Drupal 7.x < 7.102 / 10.2.x < 10.2.11 / 10.3.x < 10.3.9 / 11.x < 11.0.8 Multiple Vulnerabilities (drupal-2024-11-20)	20 Nov 202400:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-55638	15 Aug 202500:00	–	nessus
Tenable Nessus	Drupal 11.0.x < 11.0.8 Multiple Vulnerabilities	26 Nov 202400:00	–	nessus