CVE-2024-13255
RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019
Résumé
RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10.
Références
- advisory github.com
- advisory nvd.nist.gov
- web git.drupalcode.org
- web drupal.org
- web drupal.org