PT-2024-9380

CVE-2024-55634

·

تاريخ النشر

2024-11-20

·

تاريخ التحديث

2025-06-03

الوصف من

CVSS 2.0
8.5
عالية
المقاييسAV:N/AC:L/Au:S/C:C/I:C/A:N
Name of the Vulnerable Software and Affected Versions: Drupal Core versions 8.0.0 through 10.2.11 Drupal Core versions 10.3.0 through 10.3.9 Drupal Core versions 11.0.0 through 11.0.8
Description: A vulnerability in Drupal Core allows privilege escalation. This issue is related to inconsistencies in uniqueness checking for certain user fields, depending on the database engine and its collation, which may lead to data integrity issues.
Recommendations: For Drupal Core versions 8.0.0 through 10.2.11, update to a version after 10.2.11. For Drupal Core versions 10.3.0 through 10.3.9, update to a version after 10.3.9. For Drupal Core versions 11.0.0 through 11.0.8, update to a version after 11.0.8.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-7CWC-FJQM-8VH8
BIT-DRUPAL-2024-55634
DRUPAL-CORE-2024-004
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾