PT-2025-2103 · Drupal · Drupal Monster Menus
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Drupal Monster Menus versions 0.0.0 through 9.3.3
Drupal Monster Menus versions 9.4.0 through 9.4.1
Description
The issue is related to the deserialization of untrusted data, which allows object injection. This can potentially enable a remote attacker to execute arbitrary code.
Recommendations
For versions 0.0.0 through 9.3.3, update to version 9.3.4 or later.
For versions 9.4.0 through 9.4.1, update to version 9.4.2 or later.
Exploit
Fix
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Drupal Monster Menus