CVE-2024-13295

Deserialization of Untrusted Data vulnerability in Drupal Node export allows Object Injection.This issue affects Node export: from 7.X-* before 7.X-3.3.

Score

CVSS 3.1 6.6 Medium

Status

Analyzed - mlhess@drupal.org

Published

2025-01-09

Last modified

2025-01-10

Weaknesses

CWE-502

Affected products

• Node Export (Drupal)
• Node Export (Node Export Project)

References

• https://www.drupal.org/sa-contrib-2024-061