CVE-2024-13295

Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X- before 7.X-3.3...

CVE-2024-13295

The Drupal Node export module (versions 7.X- * before 7.X-3.3 ) is vulnerable to Remote Code Execution (RCE) and Object Injection due to the deserialization of untrusted data . Specifically, the module fails to sufficiently sanitize data before passing it to PHP's unserialize() function. While th...

CVE-2024-13295 Node export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-061

Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X- before 7.X-3.3...