Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-13281 DRUPAL-CONTRIB-2024-045EUVD-2024-51494GHSA-x5v3-33m6-c266

Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Vendor: Drupal Product: Monster Menus Package: drupal/monster_menus Ecosystem: Packagist

Description

Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2.

Affected products

VendorProductAffectedFixed
Drupal Monster Menus 0.0.0 – < 9.3.2 9.3.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/monster_menus < 9.3.2 9.3.2 DRUPAL-CONTRIB-2024-045

Advisories 1

References