Skip to content
OpenAdvisories
Medium · 6.6 CVE-2024-13296 DRUPAL-CONTRIB-2024-062EUVD-2024-51509GHSA-g6xh-8j45-qj24

Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Vendor: Drupal Product: Mailjet Package: drupal/mailjet Ecosystem: Packagist

Description

Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1.

Affected products

VendorProductAffectedFixed
Drupal Mailjet 0.0.0 – < 4.0.1 4.0.1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/mailjet < 4.0.1 4.0.1 DRUPAL-CONTRIB-2024-062

References