| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/single_content_sync | < 1.4.19 | 1.4.19 |
Single Content Sync enables exporting and importing content, referenced entities, and files between Drupal sites.
A maliciously crafted import file can cause untrusted data to be deserialized, potentially leading to remote code execution.
This vulnerability is mitigated by the fact that an attacker must have a role with the "import single content" permission.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free