RESTful Web Services Project RESTful Web Services 7.x-2.x Dev for Drupal

CPE Details

RESTful Web Services Project RESTful Web Services 7.x-2.x Dev for Drupal
restful_web_services_project
restful_web_services
7.x-2.x
2019-06-26
09h54 +00:00
2019-06-26
09h54 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.x:dev:*:*:*:drupal:*:*

Informations

Vendor

restful_web_services_project

Product

restful_web_services

Version

7.x-2.x

Update

dev

Target Software

drupal

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2013-4225 2020-02-11 19h19 +00:00 The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which makes it easier for remote authenticated users with the "access resource node" and "create page content" permissions (or equivalents) to conduct cross-site scripting (XSS) or execute arbitrary PHP code via a crafted text field.
8.8
Haute
CVE-2012-5556 2012-12-03 21h00 +00:00 Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.1 and 7.x-2.x before 7.x-2.0-alpha3 for Drupal allow remote attackers to hijack the authentication of arbitrary users via unknown vectors.
6.8