CVE-2013-1946: Input Validation
First published: Sun Apr 06 2014(Updated: )
The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows remote attackers to cause a denial of service via a GET request with an HTTP Accept header set to a non-HTML type, which can "interfere with Drupal's page cache."
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Restful Web Services Project Restful Web Services | =7.x-1.1 | |
| Restful Web Services Project Restful Web Services | =7.x-1.2 | |
| Restful Web Services Project Restful Web Services | =7.x-2.0-alpha3 | |
| Restful Web Services Project Restful Web Services | =7.x-2.0-alpha4 | |
| Drupal Drupal |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/restful web services project
- canonical/restful web services project restful web services
- version/restful web services project restful web services/7.x-1.1
- version/restful web services project restful web services/7.x-1.2
- version/restful web services project restful web services/7.x-2.0-alpha3
- version/restful web services project restful web services/7.x-2.0-alpha4
- vendor/drupal
- canonical/drupal drupal