PT-2015-7727 · Drupal · Monster Menus

Dan Wilga · Published 2015-11-09 · Updated 2025-08-27 · CVE-2015-8095

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Monster Menus module versions 7.x-1.21 through 7.x-1.23

Description The issue concerns the recycle bin feature in the Monster Menus module for Drupal, which fails to properly remove nodes from view. This allows remote attackers to obtain sensitive information via an unspecified URL pattern.

Recommendations For Monster Menus module versions 7.x-1.21 through 7.x-1.23, update to version 7.x-1.24 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-8095

Affected Products

Monster Menus

References · 4

• https://drupal.org/node/2608382 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8095 · Security Note
• https://drupal.org/node/2608414 · Patch
• https://t.me/cveNotify/133710 · Telegram Post