Unscored severity · published Nov 9, 2015
CVE-2015-8095
The recycle bin feature in the Monster Menus module 7.x-1.21 before 7.x-1.24 for Drupal does not properly remove nodes from view, which allows remote attackers to obtain sensitive…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The recycle bin feature in the Monster Menus module 7.x-1.21 before 7.x-1.24 for Drupal does not properly remove nodes from view, which allows remote attackers to obtain sensitive information via an unspecified URL pattern.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Monster Menus · Monster Menus Project
7.x-1.0; 7.x-1.1; 7.x-1.2; 7.x-1.3; 7.x-1.4; 7.x-1.5; +19 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-8095
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-8095
Patch
https://www.drupal.org/node/2608382
Patch
https://www.drupal.org/node/2608414
More from Monster Menus
9.1
CVE-2024-13281
Monster Menus - Moderately critical - Access bypass, Information Disclosure - SA-CONTRIB-2024-045
6.1
CVE-2026-81201
Monster Menus - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-116
4.3
CVE-2024-13288
Monster Menus - Critical - Arbitrary PHP code execution - SA-CONTRIB-2024-052
–
CVE-2013-4504
The Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers to read arbitrary node comments via a crafted URL
–
CVE-2013-4230
The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which…