CPE Details
RESTful Web Services Project RESTful Web Services 7.x-2.0 for Drupal
7.x-2.0
2019-06-26
09h54 +00:00
09h54 +00:00
2020-02-26
14h21 +00:00
14h21 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.0:*:*:*:*:drupal:*:*
Informations
Vendor
restful_web_services_projectProduct
restful_web_servicesVersion
7.x-2.0Target Software
drupalRelated CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10. | 7.5 |
High |
||
| The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which makes it easier for remote authenticated users with the "access resource node" and "create page content" permissions (or equivalents) to conduct cross-site scripting (XSS) or execute arbitrary PHP code via a crafted text field. | 8.8 |
High |
||
| The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which allows remote attackers to obtain sensitive information via unspecified vectors. | 5 |
