Description
Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Drupal | Monster Menus | 0.0.0 – < 9.3.4, 9.4.0 – < 9.4.2 | 9.3.4 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | drupal/monster_menus | < 9.3.4 · >= 9.4.0, < 9.4.2 | 9.3.4, 9.4.2 | DRUPAL-CONTRIB-2024-052 |
Advisories 1
- WID-SEC-2024-3268 Drupal: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 9, 2025