DRUPAL-CONTRIB-2018-018
This module helps in exporting and importing Menu Items via the administrative interface.
The module does not properly restrict access to administrative pages, allowing anonymous users to export and import menu links.
There is no mitigation for this vulnerability.
What each source reports
OSV No score
This module helps in exporting and importing Menu Items via the administrative interface.
The module does not properly restrict access to administrative pages, allowing anonymous users to export and import menu links.
There is no mitigation for this vulnerability.
- Record
DRUPAL-CONTRIB-2018-018- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
drupal/menu_exportPackagist:https://packages.drupal.org/8 |
before 1.2.0 | 1.2.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
DRUPAL-CONTRIB-2018-018 is a vulnerability with no CVSS score yet in drupal/menu_export, published April 18, 2018. No source lists public exploit code. Fixed in drupal/menu_export 1.2.0.