Skip to content

Commit d419a1b

Browse files
authored
Update new.json
1 parent deed580 commit d419a1b

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

input/new.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,20 +17,20 @@
1717
],
1818
[
1919
"11.0.0",
20-
"11.1.87"
20+
"11.1.8"
2121
],
2222
[
2323
"11.2.0",
2424
"11.2.7"
2525
]
2626
],
2727
"cwe": [
28-
"CWE-400"
28+
"CWE-502"
2929
],
3030
"tldr": "Affected versions of this package are vulnerable to Deserialization of Untrusted Data: a gadget chain in Drupal core can be leveraged if the application deserializes attacker-controlled data. The chain itself is not directly exploitable but can enable remote code execution when a separate vulnerability allows unsafe input to reach `unserialize()`. There are no known exploits in Drupal core.",
3131
"doest_this_affect_me": "You are affected if you are using a version that falls within the vulnerable range.",
3232
"how_to_fix": "Upgrade the `drupal/core` library to the patch version.",
33-
"vulnerable_to": "Denial of Service (DoS)",
33+
"vulnerable_to": "Deserialization of Untrusted Data",
3434
"related_cve_id": "CVE-2025-13081",
3535
"language": "PHP",
3636
"severity_class": "MEDIUM",

0 commit comments

Comments
 (0)