| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/monster_menus | ≥ 9.4.0, < 9.4.2< 9.3.4 | 9.4.29.3.4 |
| monster menus | ≥ 9.4.0, < 9.4.2< 9.3.4 | 9.4.29.3.4 |
This module enables you to group nodes within pages that have a highly-granular, distributed permissions structure.
In certain cases the module doesn't sufficiently sanitize data before passing it to PHP's unserialize() function, which can result in arbitrary code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free