CVE-2024-13255
RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019
Summary
RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019
Original description
The description as published by the source.
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10.
References
- advisory github.com
- advisory nvd.nist.gov
- web git.drupalcode.org
- web drupal.org
- web drupal.org