p PatchFirst

CVE-2024-13254

CVE-2024-13254 · REST Views - Moderately critical - Information Disclosure - SA-CONTRIB-2024-018

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1.

CVSS 7.5 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • rest views

    Versions
    • ≥ 0.0.0, < 3.0.1: Affected (semver)

    Update to 3.0.1

  • drupal/rest_views Packagist:https://packages.drupal.org/8

    Affected ranges
    • ECOSYSTEM: < 3.0.1

    Update to 3.0.1

Original sources

Check your server →