—
DRUPAL-CONTRIB-2018-018
Details
This module helps in exporting and importing Menu Items via the administrative interface.
The module does not properly restrict access to administrative pages, allowing anonymous users to export and import menu links.
There is no mitigation for this vulnerability.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/menu_export
Introduced in:
0Fixed in: 1.2.0Upgrade drupal/menu_export to 1.2.0 or newer (ecosystem packagist:https://packages.drupal.org/8).