5 matches found
CVE-2024-13288
creationtimestamp| type| source ---|---|--- 2025-01-09 21:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfdlxo3fn52d 2025-01-10 15:03:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1149...
CVE-2024-13288
Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2...
CVE-2024-13288 Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052
Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2...
CVE-2024-13288 Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052
Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2...
CVE-2024-13288
The Monster Menus module for the Drupal CMS is vulnerable to a deserialization of untrusted data flaw. The root cause is the failure to sufficiently sanitize data before passing it to PHP's unserialize() function, which enables Object Injection . This vulnerability allows a remote attacker to ach...