Lucene search

K
cve[email protected]CVE-2015-8095
HistoryOct 03, 2022 - 4:16 p.m.

CVE-2015-8095

2022-10-0316:16:01
CWE-200
web.nvd.nist.gov
17
cve-2015-8095
drupal
monster menus
information security
vulnerability
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.6%

The recycle bin feature in the Monster Menus module 7.x-1.21 before 7.x-1.24 for Drupal does not properly remove nodes from view, which allows remote attackers to obtain sensitive information via an unspecified URL pattern.

Affected configurations

NVD
Node
monster_menus_module_projectmonster_menusMatch7.x-1.0
OR
monster_menus_module_projectmonster_menusMatch7.x-1.1
OR
monster_menus_module_projectmonster_menusMatch7.x-1.2
OR
monster_menus_module_projectmonster_menusMatch7.x-1.3
OR
monster_menus_module_projectmonster_menusMatch7.x-1.4
OR
monster_menus_module_projectmonster_menusMatch7.x-1.5
OR
monster_menus_module_projectmonster_menusMatch7.x-1.6
OR
monster_menus_module_projectmonster_menusMatch7.x-1.7
OR
monster_menus_module_projectmonster_menusMatch7.x-1.8
OR
monster_menus_module_projectmonster_menusMatch7.x-1.9
OR
monster_menus_module_projectmonster_menusMatch7.x-1.10
OR
monster_menus_module_projectmonster_menusMatch7.x-1.11
OR
monster_menus_module_projectmonster_menusMatch7.x-1.12
OR
monster_menus_module_projectmonster_menusMatch7.x-1.13
OR
monster_menus_module_projectmonster_menusMatch7.x-1.14
OR
monster_menus_module_projectmonster_menusMatch7.x-1.15
OR
monster_menus_module_projectmonster_menusMatch7.x-1.16
OR
monster_menus_module_projectmonster_menusMatch7.x-1.17
OR
monster_menus_module_projectmonster_menusMatch7.x-1.18
OR
monster_menus_module_projectmonster_menusMatch7.x-1.19
OR
monster_menus_module_projectmonster_menusMatch7.x-1.20
OR
monster_menus_module_projectmonster_menusMatch7.x-1.21
OR
monster_menus_module_projectmonster_menusMatch7.x-1.22
OR
monster_menus_module_projectmonster_menusMatch7.x-1.23
OR
monster_menus_module_projectmonster_menusMatch7.x-1.xdev
AND
drupaldrupalMatch-

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.6%

Related for CVE-2015-8095