CVE-2024-13296

The Drupal Mailjet module (versions 0.0.0 through 4.0.0 ) is vulnerable to Remote Code Execution (RCE) due to a deserialization of untrusted data flaw. Specifically, the module fails to securely pass data to PHP's unserialize() function, which can lead to PHP Object Injection . While exploitation...