CVE-2024-13281

Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045

概要

取得元が公開している説明をそのまま載せています (多くは英語)。

Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

Packagist:https://packages.drupal.org/8 drupal/monster_menus

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.2"}],"database_specific":{"constraint":"<9.3.2"}}]

CWE-863