CVE-2024-12393

Summary

CVE-2024-55636 is a Deserialization of Untrusted Data vulnerability affecting Drupal Core versions 8.0.0 to 10.2.11, 10.3.0 to 10.3.9, and 11.0.0 to 11.0.8. This issue enables Object Injection, making the platform susceptible to remote code execution if untrusted data is deserializes. The vulnerability lies within a gadget chain of methods in Drupal core, which, although harmless on its own, can be exploited in conjunction with another vulnerability to execute malicious code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.