Lucene search
+L

1 matches found

Drupal
Drupal
added 2019/04/17 12:0 a.m.21 views

TableField - Critical - Remote Code Execution - SA-CONTRIB-2019-045

This module allows you to attach tabular data to an entity. The module doesn't sufficiently determine that the data being unserialized is the contents of a tablefield when users request a CSV export, which could lead to Remote Code Execution via Object Injection. This vulnerability is mitigated b...

7AI score
SaveExploits0References6
Rows per page
Query Builder