CVE-2013-1946

The CVE-2013-1946 entry affects Drupal’s RESTful Web Services (RESTWS) module for Drupal 7.x-1.x up to 7.x-1.3 and 7.x-2.x up to 7.x-2.0-alpha5. When page caching is enabled and anonymous users have RESTWS permissions, a GET request with an HTTP Accept header set to a non-HTML type can cause a de...

CVE-2013-0205

The Drupal RESTful Web Services (RESTWS) module (7.x-1.x, 7.x-2.x branches) contains a CSRF vulnerability that allows remote attackers to hijack the authentication of arbitrary users. Affected versions are RESTWS 7.x-1.x prior to 7.x-1.2 and RESTWS 7.x-2.x prior to 7.x-2.0-alpha4. The issue stems...