UNKNOWNCVE-2025-31674

Drupal Core Improperly Controlled Modification of Dynamically-Determined Object Attributes Vulnerability

Platform

drupal

Component

drupal

Fixed in

10.3.13

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Drupal core allows Object Injection.This issue affects Drupal core: from 8.0.0 before 10.3.13, from 10.4.0 before 10.4.3, from 11.0.0 before 11.0.12, from 11.1.0 before 11.1.3.

How to fix

Actualice Drupal core a la última versión disponible. Específicamente, actualice a la versión 10.3.13 o superior, 10.4.3 o superior, 11.0.12 o superior, o 11.1.3 o superior, dependiendo de la rama de Drupal que esté utilizando. Esto solucionará la vulnerabilidad de inyección de objetos.

Monitor your dependencies automatically

Get notified when new vulnerabilities affect your projects. Free forever.

Start free