Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for Tealium iQ Tag Management by Drupal

    CVE-2026-13244 (GCVE-0-2026-13244)

    Vulnerability from nvd – Published: 2026-07-10 21:46 – Updated: 2026-07-10 21:46
    VLAI
    Title
    Tealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064
    Summary
    Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ Tag Management allows Object Injection. This issue affects Tealium iQ Tag Management versions: from 0.0.0 to 2.4.0.
    Severity
    No CVSS data available.
    CWE
    • CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
    Assigner
    References
    Impacted products
    Vendor Product Version
    Drupal Tealium iQ Tag Management Affected: 0.0.0 , < 2.4.0 (semver)
    		Create a notification for this product.
    Date Public
    2026-06-26 15:27
    Credits
    Drew Webber (mcdruid) Benji Fisher (benjifisher) Daniel Schiavone (schiavone) Benji Fisher (benjifisher) Bram Driesen (bramdriesen) Neil Drumm (drumm) Drew Webber (mcdruid) Juraj Nemec (poker10)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.drupal.org/project/tealiumiq",
          "product": "Tealium iQ Tag Management",
          "repo": "https://git.drupalcode.org/project/tealiumiq",
          "vendor": "Drupal",
          "versions": [
            {
              "lessThan": "2.4.0",
              "status": "affected",
              "version": "0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Drew Webber (mcdruid)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Benji Fisher (benjifisher)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Daniel Schiavone (schiavone)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Benji Fisher (benjifisher)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Bram Driesen (bramdriesen)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Neil Drumm (drumm)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Drew Webber (mcdruid)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Juraj Nemec (poker10)"
        }
      ],
      "datePublic": "2026-06-26T15:27:49.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ Tag Management allows Object Injection. This issue affects Tealium iQ Tag Management versions: from 0.0.0 to 2.4.0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-586",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-586 Object Injection"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-915",
              "description": "CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-10T21:46:14.260Z",
        "orgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
        "shortName": "drupal"
      },
      "references": [
        {
          "url": "https://www.drupal.org/sa-contrib-2026-064"
        }
      ],
      "title": "Tealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
    "assignerShortName": "drupal",
    "cveId": "CVE-2026-13244",
    "datePublished": "2026-07-10T21:46:14.260Z",
    "dateReserved": "2026-06-24T18:00:17.008Z",
    "dateUpdated": "2026-07-10T21:46:14.260Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-13244 (GCVE-0-2026-13244)

    Vulnerability from cvelistv5 – Published: 2026-07-10 21:46 – Updated: 2026-07-10 21:46
    VLAI
    Title
    Tealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064
    Summary
    Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ Tag Management allows Object Injection. This issue affects Tealium iQ Tag Management versions: from 0.0.0 to 2.4.0.
    Severity
    No CVSS data available.
    CWE
    • CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes
    Assigner
    References
    Impacted products
    Vendor Product Version
    Drupal Tealium iQ Tag Management Affected: 0.0.0 , < 2.4.0 (semver)
    		Create a notification for this product.
    Date Public
    2026-06-26 15:27
    Credits
    Drew Webber (mcdruid) Benji Fisher (benjifisher) Daniel Schiavone (schiavone) Benji Fisher (benjifisher) Bram Driesen (bramdriesen) Neil Drumm (drumm) Drew Webber (mcdruid) Juraj Nemec (poker10)
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "collectionURL": "https://www.drupal.org/project/tealiumiq",
          "product": "Tealium iQ Tag Management",
          "repo": "https://git.drupalcode.org/project/tealiumiq",
          "vendor": "Drupal",
          "versions": [
            {
              "lessThan": "2.4.0",
              "status": "affected",
              "version": "0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Drew Webber (mcdruid)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Benji Fisher (benjifisher)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Daniel Schiavone (schiavone)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Benji Fisher (benjifisher)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Bram Driesen (bramdriesen)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Neil Drumm (drumm)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Drew Webber (mcdruid)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "Juraj Nemec (poker10)"
        }
      ],
      "datePublic": "2026-06-26T15:27:49.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ Tag Management allows Object Injection. This issue affects Tealium iQ Tag Management versions: from 0.0.0 to 2.4.0."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-586",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-586 Object Injection"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-915",
              "description": "CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-10T21:46:14.260Z",
        "orgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
        "shortName": "drupal"
      },
      "references": [
        {
          "url": "https://www.drupal.org/sa-contrib-2026-064"
        }
      ],
      "title": "Tealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026-064"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2c85b837-eb8b-40ed-9d74-228c62987387",
    "assignerShortName": "drupal",
    "cveId": "CVE-2026-13244",
    "datePublished": "2026-07-10T21:46:14.260Z",
    "dateReserved": "2026-06-24T18:00:17.008Z",
    "dateUpdated": "2026-07-10T21:46:14.260Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}