CVE-2024-13281
Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045
Summary
Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045
Original description
The description as published by the source.
Incorrect Authorization vulnerability in Drupal Monster Menus allows Forceful Browsing.This issue affects Monster Menus: from 0.0.0 before 9.3.2.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/monster_menus
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.2"}],"database_specific":{"constraint":"<9.3.2"}}]
References
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org