CVE-2015-8095

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-11-09 · updated 2026-06-17
Weakness: CWE-200

Description

The recycle bin feature in the Monster Menus module 7.x-1.21 before 7.x-1.24 for Drupal does not properly remove nodes from view, which allows remote attackers to obtain sensitive information via an unspecified URL pattern.

Affected products

Drupal Monster Menus: 7.x-1.0, 7.x-1.1, 7.x-1.2, 7.x-1.3, 7.x-1.4, 7.x-1.5 (+19)

References

https://www.drupal.org/node/2608382
https://www.drupal.org/node/2608414
https://www.drupal.org/node/2608382
https://www.drupal.org/node/2608414

Get alerted when CVE-2015-8095 or the next vulnerability affects your stack