Description
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3.
Remediation
References
Related Vulnerabilities
PHP Numeric Errors Vulnerability (CVE-2012-2386)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5304)
IBM RTC Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-1753)
Magento Incorrect Authorization Vulnerability (CVE-2020-24401)
WebLogic Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-7226)