Miembros de
Boletines de Vulnerabilidades |
Drupal core - Less critical - Gadget chain - SA-CORE-2024-006 |
|
| Software afectado | Drupal |
|
Project: Drupal coreDate: 2024-November-20Security risk: Less critical 8 ∕ 25 AC:Complex/A:User/CI:None/II:Some/E:Theoretical/TD:UncommonVulnerability: Gadget chainAffected versions: >= 8.0.0 = 10.3.0 = 11.0.0 CVE IDs: CVE-2024-55636Description: Drupal core contains a potential PHP Object Injection vulnerability that (if combined with another exploit) could lead to Artbitrary File Deletion. It is not directly exploitable.This issue is mitigated by the fact that in order to be More info: https://www.drupal.org/sa-core-2024-006 |
|
