Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-13255

RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019

Description

Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue affects RESTful Web Services: from 7.X-2.0 before 7.X-2.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drupal RESTful Web Services

Default version status: unaffected

  • 7.x-2.0 to < 7.x-2.10affected

References