Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Drupal Subscribe
Filtered by product Views Dynamic Field
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-19826 1 Drupal 1 Views Dynamic Field 2019-12-27 7.5 HIGH 9.8 CRITICAL
The Views Dynamic Fields module through 7.x-1.0-alpha4 for Drupal makes insecure unserialize calls in handlers/views_handler_filter_dynamic_fields.inc, as demonstrated by PHP object injection, involving a field_names object and an Archive_Tar object, for file deletion. Code execution might also be possible.