CVE-2015-8095: Infoleak
The recycle bin feature in the Monster Menus module 7.x-1.21 before 7.x-1.24 for Drupal does not properly remove nodes from view, which allows remote attackers to obtain sensitive information via an unspecified URL pattern.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8095?
CVE-2015-8095 has been classified with a moderate severity level due to the potential for sensitive information disclosure.
How do I fix CVE-2015-8095?
To fix CVE-2015-8095, you should upgrade to Monster Menus module version 7.x-1.24 or later.
Which versions of the Monster Menus module are affected by CVE-2015-8095?
CVE-2015-8095 affects the Monster Menus module versions 7.x-1.0 through 7.x-1.21.
What type of information can be leaked due to CVE-2015-8095?
CVE-2015-8095 can potentially allow remote attackers to access sensitive information by exploiting improper node removal from view in the recycle bin.
Is there a workaround for CVE-2015-8095 if I cannot update?
Currently, there is no official workaround for CVE-2015-8095 other than upgrading to the secure version.