Skip to content
OpenAdvisories
High · 7.5 CVE-2024-13254 DRUPAL-CONTRIB-2024-018EUVD-2024-51468GHSA-wjhm-v52r-7x9g

REST Views - Moderately critical - Information Disclosure - SA-CONTRIB-2024-018

Published Jan 9, 2025 · Updated Jan 10, 2025 · Assigned by drupal

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1.

Affected products

VendorProductAffectedFixed
Drupal REST Views 0.0.0 – < 3.0.1 3.0.1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist drupal/rest_views < 3.0.1 3.0.1 DRUPAL-CONTRIB-2024-018

Advisories 1

References