CVSS base score
What the vulnerability does
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection. This issue affects Drupal core: from 8.0.0 before 10.5.9, from 10.6.0 before 10.6.7, from 11.0.0 before 11.2.11, from 11.3.0 before 11.3.7.
Explanation of Vulnerability in Simple Terms
A vulnerability in Drupal core versions 8.0.0 through 10.5.8 allows an attacker to exploit an unknown weakness. The exact nature of the vulnerability cannot be determined from available metadata. Update to Drupal 10.5.9 or later to remediate.
What an attacker can do
Unknown; insufficient technical details available.
Potential impact on your site
Drupal sites running versions 8.0.0–10.5.8 are affected. Update immediately to 10.5.9.
Conditions required to exploit
Unknown; insufficient technical details available.
Key dates
External resources
Related vulnerabilities
