{"id":"DRUPAL-CONTRIB-2024-052","aliases":["CVE-2024-13288"],"title":"DRUPAL-CONTRIB-2024-052","description":"This module enables you to group nodes within pages that have a highly-granular, distributed permissions structure.\n\nIn certain cases the module doesn't sufficiently sanitize data before passing it to PHP's unserialize() function, which can result in arbitrary code execution.","severity":"unknown","score":null,"published":"2024-10-23T15:45:47.000Z","modified":"2026-09-10T03:45:57.682Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist:https://packages.drupal.org/8","name":"drupal/monster_menus","ranges":[{"events":[{"introduced":"0"},{"fixed":"9.3.4"}],"type":"ECOSYSTEM","database_specific":{"constraint":"<9.3.4"}},{"events":[{"introduced":"9.4.0"},{"fixed":"9.4.2"}],"type":"ECOSYSTEM","database_specific":{"constraint":">=9.4.0 <9.4.2"}}],"versions":[],"fixed":["9.3.4","9.4.2"]}],"sourceAffected":[],"references":["https://www.drupal.org/sa-contrib-2024-052"],"sources":[{"name":"OSV","id":"DRUPAL-CONTRIB-2024-052","modified":"2026-09-10T03:45:57.682259915Z","url":"https://osv.dev/vulnerability/DRUPAL-CONTRIB-2024-052"}],"assessments":[]}