Cross-site request forgery (CSRF) vulnerability in the RESTful Web Services (restws) module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote attackers to hijack the authentication of arbitrary users via unknown vectors.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2013/01/21/5 | Mailing List Third Party Advisory |
| https://drupal.org/node/1890212 | Patch Vendor Advisory |
| https://drupal.org/node/1890216 | Patch Vendor Advisory |
| https://drupal.org/node/1890222 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
10 Nov 2021, 17:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MLIST) http://www.openwall.com/lists/oss-security/2013/01/21/5 - Mailing List, Third Party Advisory | |
| References | (CONFIRM) https://drupal.org/node/1890216 - Patch, Vendor Advisory | |
| References | (CONFIRM) https://drupal.org/node/1890212 - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.0:alpha2:*:*:*:drupal:*:* cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.0:alpha1:*:*:*:drupal:*:* cpe:2.3:a:restful_web_services_project:restful_web_services:*:*:*:*:*:drupal:*:* cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.0:alpha3:*:*:*:drupal:*:* cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.0:-:*:*:*:drupal:*:* cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* |
Information
Published : 2013-03-19 14:55
Updated : 2024-02-04 18:16
NVD link : CVE-2013-0205
Mitre link : CVE-2013-0205
CVE.ORG link : CVE-2013-0205
JSON object : View
Products Affected
restful_web_services_project
- restful_web_services
drupal
- drupal
CWE
CWE-352
Cross-Site Request Forgery (CSRF)