RESTful Web Services Project RESTful Web Services 7.x-2.0 for Drupal

CPE Details

RESTful Web Services Project RESTful Web Services 7.x-2.0 for Drupal
restful_web_services_project
restful_web_services
7.x-2.0
2020-02-26
14h21 +00:00
2020-02-26
14h21 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.0:-:*:*:*:drupal:*:*

Informations

Vendor

restful_web_services_project

Product

restful_web_services

Version

7.x-2.0

Update

-

Target Software

drupal

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2013-4225 2020-02-11 19h19 +00:00 The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which makes it easier for remote authenticated users with the "access resource node" and "create page content" permissions (or equivalents) to conduct cross-site scripting (XSS) or execute arbitrary PHP code via a crafted text field.
8.8
High
CVE-2015-4345 2015-06-15 12h00 +00:00 The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which allows remote attackers to obtain sensitive information via unspecified vectors.
5
CVE-2013-0205 2013-03-19 14h00 +00:00 Cross-site request forgery (CSRF) vulnerability in the RESTful Web Services (restws) module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote attackers to hijack the authentication of arbitrary users via unknown vectors.
6.8