Lucene search
+L

13 matches found

GithubExploit
GithubExploit
•added 2026/05/20 6:38 p.m.•150 views

drupal-sa-core-2026-004-lab

SA-CORE-2026-004 — Lab, PoC, and Post-mortem Drupal core SQ...

6AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-51468

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00491EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/01/17 12:00 a.m.•14 views

The vulnerability of the REST Views module in the Drupal CMS system, related to insufficient protection of operational data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the REST Views module in the Drupal CMS system is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS5.5AI score0.00491EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2025/01/09 7:15 p.m.•25 views

CVE-2024-13254

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1...

7.5CVSS0.00491EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/09 6:59 p.m.•8 views

CVE-2024-13254 REST Views - Moderately critical - Information Disclosure - SA-CONTRIB-2024-018

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1...

6.9AI score0.00491EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/09 6:59 p.m.•25 views

CVE-2024-13254 REST Views - Moderately critical - Information Disclosure - SA-CONTRIB-2024-018

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1...

0.00491EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/09 6:59 p.m.•66 views

CVE-2024-13254

The Drupal REST Views module (versions 0.0.0 through 3.0.1 ) is vulnerable to an Insertion of Sensitive Information Into Sent Data issue (CWE-201). The root cause is insufficient protection of operational data , which allows for forceful browsing . This vulnerability enables a remote attacker to ...

7.5CVSS6.6AI score0.00491EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/01/09 6:59 p.m.•12 views

CVE-2024-13254 REST Views - Moderately critical - Information Disclosure - SA-CONTRIB-2024-018

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1...

7.5CVSS7.1AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•5 views

CVE-2024-13254: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Drupal REST Views allows Forceful Browsing.This issue affects REST Views: from 0.0.0 before 3.0.1...

7.5CVSS5.8AI score0.00491EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•14 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal REST Views prior to version 3.0.1, which stems from the inclusion of an insertion of sensitive information into sent data vulnerability...

7.5CVSS6.5AI score0.00491EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2024/04/24 12:00 a.m.•10 views

Drupal REST Views module < 3.0.1 - Unauthenticated Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure vulnerability discovered by nicxvan in WordPress Module REST Views versions 3.0.1...

7AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/04/24 12:00 a.m.•15 views

PT-2024-10129 · Drupal · Drupal Rest Views

Name of the Vulnerable Software and Affected Versions: Drupal REST Views versions 0.0.0 through 3.0.1 Description: The issue is related to the insertion of sensitive information into sent data, allowing forceful browsing. This can enable a remote attacker to gain unauthorized access to protected...

7.8CVSS7.2AI score0.00491EPSS
SaveExploits0References5
Drupal
Drupal
•added 2024/04/24 12:00 a.m.•38 views

REST Views - Moderately critical - Information Disclosure - SA-CONTRIB-2024-018

The Rest views module lets site admins create rest exports in views with additional options for serializing data. This module does not accurately check access and may expose paths to unpublished content. This vulnerability is mitigated by the fact that there must be a specific content structure t...

7.5CVSS6.9AI score0.00491EPSS
SaveExploits0References6
Rows per page
Query Builder