CVE-2024-13295 - CERT CVE

  1. CVE-2024-13295

ID CVE-2024-13295
Sažetak Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X-* before 7.X-3.3.
Reference
CVSS
Base: 6.6
Impact: 5.9
Exploitability:0.7
Pristup
VektorSloženostAutentikacija
NETWORK HIGH HIGH
Impact
PovjerljivostCjelovitostDostupnost
HIGH HIGH HIGH
CVSS vektor CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Zadnje važnije ažuriranje 10-01-2025 - 19:15
Objavljeno 09-01-2025 - 21:15