PT-2014-2521
CVE-2013-1946
·
تاريخ النشر
2014-04-06
·
تاريخ التحديث
2020-02-26
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Drupal RESTful Web Services (RESTWS) module versions 7.x-1.x before 7.x-1.3
Drupal RESTful Web Services (RESTWS) module versions 7.x-2.x before 7.x-2.0-alpha5
Description
The issue allows remote attackers to cause a denial of service via a GET request with an HTTP Accept header set to a non-HTML type. This can interfere with Drupal's page cache when page caching is enabled and anonymous users are assigned RESTWS permissions.
Recommendations
For versions 7.x-1.x before 7.x-1.3, update to version 7.x-1.3 or later.
For versions 7.x-2.x before 7.x-2.0-alpha5, update to version 7.x-2.0-alpha5 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾