Cross site request forgery (csrf)

2012-12-0321:55:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.1%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.1 and 7.x-2.x before 7.x-2.0-alpha3 for Drupal allow remote attackers to hijack the authentication of arbitrary users via unknown vectors.

CPENameOperatorVersion
restful_web_serviceseq7.x-1.0 beta1
restful_web_serviceseq7.x-1.0 beta2
restful_web_serviceseq7.120.10
restful_web_serviceseq7.x-1.x dev
restful_web_serviceseq7.x-2.0 alpha1
restful_web_serviceseq7.x-2.0 alpha2
restful_web_serviceseq7.x-2.x dev

Name	Operator	Version
restful_web_services	eq	7.x-1.0 beta1
restful_web_services	eq	7.x-1.0 beta2
restful_web_services	eq	7.120.10
restful_web_services	eq	7.x-1.x dev
restful_web_services	eq	7.x-2.0 alpha1
restful_web_services	eq	7.x-2.0 alpha2
restful_web_services	eq	7.x-2.x dev