Skip to content
OpenAdvisories
Unscored DRUPAL-CONTRIB-2018-018

This module helps in exporting and importing Menu Items via the administrative interface. The module does not properly restrict access to a…

Published Apr 18, 2018 · Updated Sep 10, 2026 · Assigned by DRUPAL

Package: drupal/menu_export Ecosystem: Packagist

Description

This module helps in exporting and importing Menu Items via the administrative interface.

The module does not properly restrict access to administrative pages, allowing anonymous users to export and import menu links.

There is no mitigation for this vulnerability.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/menu_export < 1.2.0 1.2.0 DRUPAL-CONTRIB-2018-018

References