The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows remote attackers to cause a denial of service via a GET request with an HTTP Accept header set to a non-HTML type, which can "interfere with Drupal's page cache."
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2013/04/12/1 | |
| http://www.osvdb.org/92259 | |
| https://drupal.org/node/1966752 | |
| https://drupal.org/node/1966758 | Patch Vendor Advisory |
| https://drupal.org/node/1966780 | Patch Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2013/04/12/1 | |
| http://www.osvdb.org/92259 | |
| https://drupal.org/node/1966752 | |
| https://drupal.org/node/1966758 | Patch Vendor Advisory |
| https://drupal.org/node/1966780 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 01:50
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2013/04/12/1 - | |
| References | () http://www.osvdb.org/92259 - | |
| References | () https://drupal.org/node/1966752 - | |
| References | () https://drupal.org/node/1966758 - Patch, Vendor Advisory | |
| References | () https://drupal.org/node/1966780 - Patch, Vendor Advisory |
Information
Published : 2014-04-06 16:55
Updated : 2024-11-21 01:50
NVD link : CVE-2013-1946
Mitre link : CVE-2013-1946
CVE.ORG link : CVE-2013-1946
JSON object : View
Products Affected
restful_web_services_project
- restful_web_services
drupal
- drupal
CWE
CWE-20
Improper Input Validation