Skip to content
OpenAdvisories
Medium · 6.6 CVE-2024-13295 EUVD-2024-51508GHSA-6372-2hcg-2fr4

Node export - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-061

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X-* before 7.X-3.3.

Affected products

VendorProductAffectedFixed
Drupal Node export 7.x-* – < 7.x-3.3 7.x-3.3

References