CVE-2024-13295

The Drupal Node export module (versions 7.X- * before 7.X-3.3 ) is vulnerable to Remote Code Execution (RCE) and Object Injection due to the deserialization of untrusted data . Specifically, the module fails to sufficiently sanitize data before passing it to PHP's unserialize() function. While th...