CVE-2024-13254

The Drupal REST Views module (versions 0.0.0 through 3.0.1 ) is vulnerable to an Insertion of Sensitive Information Into Sent Data issue (CWE-201). The root cause is insufficient protection of operational data , which allows for forceful browsing . This vulnerability enables a remote attacker to ...