CVE-2024-13296

The Drupal Mailjet module (versions before 4.0.1 ) is vulnerable to Object Injection due to a deserialization of untrusted data flaw. Specifically, the module fails to securely pass data to PHP's unserialize() function. This vulnerability can lead to Remote Code Execution (RCE) . While an attack ...