Каталог CVE

CVE-2024-55637

UBUNTU-

[Каталог CVE]

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization vulnerability exists on the site. This so-called gadget chain presents no direct threat but is a vector that can be used to achieve remote code execution if the application deserializes untrusted data due to another vulnerability.

Критичність
Невідомо
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.83% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Ubuntuprodrupal77.23-1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.24-1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.24-2Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.26-1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.26-1ubuntu0.1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.26-1ubuntu0.1+esm1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.26-1ubuntu0.1+esm2Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.26-1ubuntu0.1+esm3Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.38-1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.41-1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.44-1ubuntu1~16.04.0Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.44-1ubuntu1~16.04.0+esm1Affected[UBUNTU-CVE-2024-55637]

Showing 12 observations. All 14 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Ubuntuprodrupal77.23-1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.24-1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.24-2Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.26-1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.26-1ubuntu0.1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.26-1ubuntu0.1+esm1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.26-1ubuntu0.1+esm2Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.26-1ubuntu0.1+esm3Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.38-1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.41-1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.44-1ubuntu1~16.04.0Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.44-1ubuntu1~16.04.0+esm1Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.44-1ubuntu1~16.04.0+esm2Affected[UBUNTU-CVE-2024-55637]
Ubuntuprodrupal77.44-1ubuntu1~16.04.0+esm3Affected[UBUNTU-CVE-2024-55637]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "drupal7",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "7.23-1",
        "7.24-1",
        "7.24-2",
        "7.26-1",
        "7.26-1ubuntu0.1",
        "7.26-1ubuntu0.1+esm1",
        "7.26-1ubuntu0.1+esm2",
        "7.26-1ubuntu0.1+esm3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-55637",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-55637",
      "provider_updated_at": "2025-09-08T17:05:36Z"
    },
    {
      "name": "drupal7",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "7.38-1",
        "7.41-1",
        "7.44-1ubuntu1~16.04.0",
        "7.44-1ubuntu1~16.04.0+esm1",
        "7.44-1ubuntu1~16.04.0+esm2",
        "7.44-1ubuntu1~16.04.0+esm3"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-55637",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-55637",
      "provider_updated_at": "2025-09-08T17:05:36Z"
    }
  ]
}

OpenFactory catalog packages

Зіставлення пакетів триває.

Спостережено:

Посилання

[FIRST EPSS] · [OSV Package Vulnerability Database]