« Volver al listado

CVE-2024-13288

Estado: AnalizadaMedia (4.3)—

Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Monster Menus Project — Monster Menus

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-13288",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-13288",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-01-10T14:49:48.123940Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "mlhess@drupal.org",
      "affectedData": [
        {
          "repo": "https://git.drupalcode.org/project/monster_menus",
          "vendor": "Drupal",
          "product": "Monster Menus",
          "versions": [
            {
              "status": "affected",
              "version": "0.0.0",
              "lessThan": "9.3.4",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.4.0",
              "lessThan": "9.4.2",
              "versionType": "semver"
            }
          ],
          "collectionURL": "https://www.drupal.org/project/monster_menus",
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-01-09T21:15:26.220",
  "references": [
    {
      "url": "https://www.drupal.org/sa-contrib-2024-052",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "mlhess@drupal.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "mlhess@drupal.org",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monster Menus: from 0.0.0 before 9.3.4, from 9.4.0 before 9.4.2."
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad de deserialización de datos no confiables en Drupal Monster Menus permite la inyección de objetos. Este problema afecta a Monster Menus: desde 0.0.0 antes de 9.3.4, desde 9.4.0 antes de 9.4.2."
    }
  ],
  "lastModified": "2026-06-17T07:01:41.663",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:monster_menus_project:monster_menus:*:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E5669A94-5908-41FB-8857-82790EE25CDA",
              "versionEndExcluding": "9.3.4"
            },
            {
              "criteria": "cpe:2.3:a:monster_menus_project:monster_menus:*:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4686015B-C180-41D3-A892-E538B73A7188",
              "versionEndExcluding": "9.4.2",
              "versionStartIncluding": "9.4.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "mlhess@drupal.org"
}