Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 06/04/2014 Updated: 26/02/2020

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The RESTful Web Services (RESTWS) module 7.x-1.x prior to 7.x-1.3 and 7.x-2.x prior to 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows remote malicious users to cause a denial of service via a GET request with an HTTP Accept header set to a non-HTML type, which can "interfere with Drupal's page cache."

Vulnerable Product	Search on Vulmon	Subscribe to Product
restful web services project restful web services 7.x-1.1
restful web services project restful web services 7.x-1.2
restful web services project restful web services 7.x-2.0

CWE-20 https://drupal.org/node/1966780 https://drupal.org/node/1966752 http://www.openwall.com/lists/oss-security/2013/04/12/1 https://drupal.org/node/1966758 http://www.osvdb.org/92259 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2013-1946

Vulnerability Summary

References

Vulmon Search

About

Products

Connect