CVE-2024-13258
Drupal REST & JSON API Authentication module restricts and secures unauthorized access to your Drupal site APIs using different authentication methods...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Drupal REST & JSON API Authentication module restricts and secures unauthorized access to your Drupal site APIs using different authentication methods including Basic Authentication , API Key Authentication , JWT Authentication , OAuth Authentication , External / Third-Party Provider Authentication, etc.
The module doesn't sufficiently control user access when using Basic Authentication.
影響パッケージ
Packagist:https://packages.drupal.org/8
drupal/rest_api_authentication
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.13"}],"database_specific":{"constraint":"<2.0.13"}}]
参照URL
- web drupal.org