CVE-2024-13254
CVE-2024-13254 · REST Views - Moderately critical - Information Disclosure - SA-CONTRIB-2024-018
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1.
CVSS 7.5 · High · EPSS 0.5% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
rest views
- Versions
- ≥ 0.0.0, < 3.0.1: Affected (semver)
Update to 3.0.1
drupal/rest_views Packagist:https://packages.drupal.org/8
- Affected ranges
- ECOSYSTEM: < 3.0.1
Update to 3.0.1