Restful Web Services Project

Restful Web Services

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-13255

  • EPSS 0.14%
  • Veröffentlicht 09.01.2025 19:15:19
  • Zuletzt bearbeitet 04.06.2025 16:25:15

Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10.

8.8

CVE-2013-4225

  • EPSS 0.47%
  • Veröffentlicht 11.02.2020 21:15:10
  • Zuletzt bearbeitet 21.11.2024 01:55:09

The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which makes it easier for remote authenticated users with the "access resource node" a...

5

CVE-2015-4345

  • EPSS 0.33%
  • Veröffentlicht 15.06.2015 14:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which allows remote attackers to obtain sensitive information via unspecified vec...

4.3

CVE-2013-1946

  • EPSS 0.48%
  • Veröffentlicht 06.04.2014 16:55:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows remote attackers to cause a denial of service via a...

6.8

CVE-2013-0205

  • EPSS 0.17%
  • Veröffentlicht 19.03.2013 14:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site request forgery (CSRF) vulnerability in the RESTful Web Services (restws) module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote attackers to hijack the authentication of arbitrary users via unknown vector...

6.8

CVE-2012-5556

  • EPSS 0.15%
  • Veröffentlicht 03.12.2012 21:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.1 and 7.x-2.x before 7.x-2.0-alpha3 for Drupal allow remote attackers to hijack the authentication of arbitrary users via unkn...