CVE-2013-4504: Low severity Monster Menus Module Project Monster Menus vulnerability
Published May 13, 2014
·Updated
The Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers to read arbitrary node comments via a crafted URL.
Affected Software
34 affected components
Monster Menus Module Project Monster Menus=7.x-1.0
Monster Menus Module Project Monster Menus=7.x-1.1
Monster Menus Module Project Monster Menus=7.x-1.2
Monster Menus Module Project Monster Menus=7.x-1.3
Monster Menus Module Project Monster Menus=7.x-1.4
Monster Menus Module Project Monster Menus=7.x-1.5
Monster Menus Module Project Monster Menus=7.x-1.6
Monster Menus Module Project Monster Menus=7.x-1.7
Monster Menus Module Project Monster Menus=7.x-1.8
Monster Menus Module Project Monster Menus=7.x-1.9
Monster Menus Module Project Monster Menus=7.x-1.10
Monster Menus Module Project Monster Menus=7.x-1.11
Monster Menus Module Project Monster Menus=7.x-1.12
Monster Menus Module Project Monster Menus=7.x-1.13
Monster Menus Module Project Monster Menus=7.x-1.14
Monster Menus Module Project Monster Menus=7.x-1.x-dev
Drupal Drupal
All of the following
Any of the following
Monster Menus Project Monster Menus=7.x-1.0
Monster Menus Project Monster Menus=7.x-1.1
Monster Menus Project Monster Menus=7.x-1.2
Monster Menus Project Monster Menus=7.x-1.3
Monster Menus Project Monster Menus=7.x-1.4
Monster Menus Project Monster Menus=7.x-1.5
Monster Menus Project Monster Menus=7.x-1.6
Monster Menus Project Monster Menus=7.x-1.7
Monster Menus Project Monster Menus=7.x-1.8
Monster Menus Project Monster Menus=7.x-1.9
Monster Menus Project Monster Menus=7.x-1.10
Monster Menus Project Monster Menus=7.x-1.11
Monster Menus Project Monster Menus=7.x-1.12
Monster Menus Project Monster Menus=7.x-1.13
Monster Menus Project Monster Menus=7.x-1.14
Monster Menus Project Monster Menus=7.x-1.x-dev
Drupal Drupal
Remediation
Patch Available
Patch Available
Event History
May 13, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-4504?
CVE-2013-4504 has been classified as a moderate severity vulnerability due to its ability to expose arbitrary node comments to remote attackers.
2
How do I fix CVE-2013-4504?
To fix CVE-2013-4504, update the Monster Menus module to version 7.x-1.15 or later.
3
Who is affected by CVE-2013-4504?
CVE-2013-4504 affects all versions of the Monster Menus module prior to 7.x-1.15.
4
What types of attacks are possible with CVE-2013-4504?
CVE-2013-4504 allows remote attackers to read arbitrary node comments through a crafted URL.
5
Is there a workaround for CVE-2013-4504?
Disabling the Monster Menus module is a temporary workaround until it can be updated to a secure version.