Deserialization Vulnerability in Drupal Monster Menus

CVE-2024-13288

What is CVE-2024-13288?

A vulnerability in the Monster Menus module for Drupal allows for object injection through the deserialization of untrusted data. This issue affects versions of Monster Menus prior to 9.3.4 and versions from 9.4.0 to 9.4.2. Exploitation of this vulnerability could lead to unauthorized actions within the application, making it essential for users to update to the recommended versions to ensure their systems are secure.

References