Description

A vulnerability in Drupal Core allows Privilege Escalation.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8.

Remediation

References

CVE-2024-55634

Related Vulnerabilities

WordPress Plugin Quick Page/Post Redirect Open Redirect (5.1.5)

Joomla Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-15697)

Jboss EAP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-10862)

Serendipity Server-Side Request Forgery (SSRF) Vulnerability (CVE-2016-9752)

WordPress Plugin Multi Plugin Installer Arbitrary File Disclosure (1.1.0)

Severity

High

Classification

CVE-2024-55634 CWE-178 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Tags

Missing Update Known Vulnerabilities