RW
Product
Restful Web Services
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add Restful Web Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-4225 | 8.8 | Feb 11 | The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which makes it… Affected: 7.x-1.0 before 7.x-1.4; 7.x-2.0 before 7.x-2.1; 7.x-2.x |
| CVE-2024-13255 | 7.5 | Jan 9 | RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019 Affected: 7.x-2.0 before 7.x-2.10 |
| CVE-2015-4345 | – | Jun 15 | The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which… Affected: 7.x-1.0; 7.x-1.1; 7.x-1.2; 7.x-1.3; 7.x-1.4; 7.x-2.0; +2 more |
| CVE-2013-1946 | – | Apr 6 | The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS… Affected: 7.x-1.1; 7.x-1.2; 7.x-2.0; 7.x-2.0 |
| CVE-2013-0205 | – | Mar 19 | Cross-site request forgery (CSRF) vulnerability in the RESTful Web Services (restws) module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote… Affected: 7.x-1.0 before 7.x-1.2; 7.x-2.0; 7.x-2.0; 7.x-2.0; 7.x-2.0 |
| CVE-2012-5556 | – | Dec 3 | Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.1 and 7.x-2.x before 7.x-2.0-alpha3 for Drupal allow… Affected: 7.x-1.0; 7.x-1.0; 7.x-1.0; 7.x-1.x; 7.x-2.0; 7.x-2.0; +1 more |
Showing 6