| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/content_synchronizer | < 4.1.1 | 4.1.1 |
The Content Synchronizer module allows content to be exported and imported between Drupal sites via uploaded archive files.
A maliciously crafted import file can cause untrusted data to be deserialized (PHP Object Injection, CWE-502), potentially leading to remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free