{"id":"drupal-security-9048b6740a0c","seq":2026,"kind":"advisory","title":"Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008","url":"https://www.drupal.org/sa-core-2024-008","permalink":"https://vulnpulse.app/items/drupal-security-9048b6740a0c","summary":"Project: Drupal core Project machine name: drupal Date: 2024-November-20 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Gadget chain Affected versions: >=7.0 < 7.102 || >= 8.0.0 < 10.2.11 || >= 10.3.0 < 10.3.9 CVE IDs: CVE-2024-55638 Description: Drupal core contains a potential PHP Object Injection vulnerability that (if combined with another exploit) could lead to Remote Code Execution. It is not directly exploitable. This issue is mitigated by the fact that in order for it to be exploitable, a separate vulnerability must…","severity":"critical","techs":["drupal","php"],"cves":["CVE-2024-55638"],"tags":["security"],"source":{"id":"drupal-security","name":"Drupal Security Advisories"},"published_at":"2024-11-20T17:29:59.000Z","fetched_at":"2026-10-21T16:17:45.699Z"}