Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062

Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.

What is CVE-2024-13296?

CVE-2024-13296 is a vulnerability classified as Deserialization of Untrusted Data, affecting Mailjet (affected versions: 0.0.0 – < 4.0.1). This vulnerability is rated Medium, with a CVSS score of 6.6. Current sources do not report this vulnerability as exploited.

Overview

Original source data

Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1.

Affected products and scope

The analysis could not be completed. The original vulnerability data remains available below.

Technical details

The analysis could not be completed. The original vulnerability data remains available below.

Exploitability

The analysis could not be completed. The original vulnerability data remains available below.

Technical impact

The analysis could not be completed. The original vulnerability data remains available below.

Business impact

The analysis could not be completed. The original vulnerability data remains available below.

Remediation

The analysis could not be completed. The original vulnerability data remains available below.

Detection

The analysis could not be completed. The original vulnerability data remains available below.
Sources (7)
GCVE / Vulnerability-Lookup
CVE Program
drupal (CNA)
NVD
FIRST EPSS
Red Hat CSAF VEX
drupal.org
Learn more

Run an in-depth assessment with complete web risk management

CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.

Explore CyStack VulnScan

Explore other related solutions

Mailjet

Drupal

--
View details
View all security vulnerabilities