Restful Web Services Project Restful Web Services — known CVE vulnerabilities

Every CVE whose affected-product data names Restful Web Services Project Restful Web Services, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2013-4225 — CVSS 8.8 (high): The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to…
• CVE-2024-13255 — CVSS 7.5 (high): Exposure of Sensitive Information Through Data Queries vulnerability in Drupal RESTful Web Services allows Forceful Browsing.This issue…
• CVE-2012-5556 — CVSS 6.8 (medium): Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.1 and 7.x-2.x…
• CVE-2013-0205 — CVSS 6.8 (medium): Cross-site request forgery (CSRF) vulnerability in the RESTful Web Services (restws) module 7.x-1.x before 7.x-1.2 and 7.x-2.x before…
• CVE-2015-4345 — CVSS 5.0 (medium): The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches…
• CVE-2013-1946 — CVSS 4.3 (medium): The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled…