CVE-2024-13255
Published Jan 9, 2025Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0…
Vendor/product archive
restful_web_services_project / restful_web_services CVEs
Beta · best-effort6 CVEs tagged to restful_web_services_project / restful_web_services — 0 Critical, 2 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2013-4225
Published Feb 11, 2020The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which makes it…
CVE-2015-4345
Published Jun 15, 2015The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which allo…
CVE-2013-1946
Published Apr 6, 2014The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS…
CVE-2013-0205
Published Mar 19, 2013Cross-site request forgery (CSRF) vulnerability in the RESTful Web Services (restws) module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote attac…
CVE-2012-5556
Published Dec 3, 2012Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.1 and 7.x-2.x before 7.x-2.0-alpha3 for Drupal allow re…
Showing 1-6 of 6 CVEsPage 1 of 1