CVE-2024-13288: Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052
Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-13288?
CVE-2024-13288 is classified as a high-severity vulnerability impacting Drupal Monster Menus.
How do I fix CVE-2024-13288?
To fix CVE-2024-13288, update your Drupal Monster Menus to version 9.3.4 or 9.4.2 or later.
What types of systems are affected by CVE-2024-13288?
CVE-2024-13288 affects Drupal Monster Menus versions from 0.0.0 up to but not including 9.3.4 and from 9.4.0 up to but not including 9.4.2.
What kind of attack can occur due to CVE-2024-13288?
CVE-2024-13288 allows for Object Injection, which can lead to unauthorized access or data manipulation.
Who is responsible for addressing CVE-2024-13288?
Website administrators using the affected versions of Drupal Monster Menus are responsible for applying necessary patches or updates to mitigate CVE-2024-13288.