CVE-2024-13288
Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052
Summary
Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052
Original description
The description as published by the source.
Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2.
Affected packages
Packagist:https://packages.drupal.org/8
drupal/monster_menus
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.3.4"}],"database_specific":{"constraint":"<9.3.4"}},{"type":"ECOSYSTEM","events":[{"introduced":"9.4.0"},{"fixed":"9.4.2"}],"database_specific":{"constraint":">=9.4.0 <9.4.2"}}]
References
- advisory github.com
- advisory nvd.nist.gov
- web drupal.org
- web git.drupalcode.org
- web drupal.org