CyberRota Analysis
AI-GeneratedDrupal core versions up to 10.5.12, 10.6.11, 11.2.14, 11.3.12, and earlier versions are vulnerable to an improper control of object attributes, allowing for object injection attacks. This could lead to unauthorized access or manipulation of data within affected Drupal installations. Organizations using these versions should prioritize patching to mitigate potential security risks.
Original NVD Description
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection. This issue affects Drupal core versions: from 0.0.0 to 10.5.12, from 10.6.0 to 10.6.11, from 11.2.0 to 11.2.14, from 11.3.0 to 11.3.12, from 0.0.0 to 11.0.*, from 0.0.0 to 11.1.*.
Related CVEs
Other vulnerabilities affecting the same vendor(s)