—

DRUPAL-CONTRIB-2024-052

Details

This module enables you to group nodes within pages that have a highly-granular, distributed permissions structure.

In certain cases the module doesn't sufficiently sanitize data before passing it to PHP's unserialize() function, which can result in arbitrary code execution.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist:https://packages.drupal.org/8/drupal/monster_menus

Introduced in: 0Fixed in: 9.3.4

Upgrade drupal/monster_menus to 9.3.4 or newer (ecosystem packagist:https://packages.drupal.org/8).

References

https://www.drupal.org/sa-contrib-2024-052[WEB]