Vulnerability DRUPAL-CONTRIB-2024-052
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
October 23, 2024 at 03:45 PM UTC
No summary available
<9.3.4, >=9.4.0 <9.4.2
<9.3.4, >=9.4.0 <9.4.2
Details
This module enables you to group nodes within pages that have a highly-granular, distributed permissions structure.
In certain cases the module doesn't sufficiently sanitize data before passing it to PHP's unserialize() function, which can result in arbitrary code execution.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
3 hours ago
No summary available
<9.5.6 DRUPAL-CONTRIB-2026-253
<9.5.6 DRUPAL-CONTRIB-2026-253
Unknown
1 month ago
No summary available
<9.5.3 DRUPAL-CONTRIB-2026-116
<9.5.3 DRUPAL-CONTRIB-2026-116
Unknown
2 years ago
No summary available
<9.3.2 DRUPAL-CONTRIB-2024-045
<9.3.2 DRUPAL-CONTRIB-2024-045
Impacted packages
Timeline
Published
1 year ago
October 23, 2024 at 03:45 PM UTC
Last Modified
1 month ago
September 10, 2026 at 03:45 AM UTC