| Package | Affected versions | Patched versions |
|---|---|---|
| restful web services | = 7.x-1.0= 7.x-1.1= 7.x-1.2= 7.x-1.3= 7.x-1.4= 7.x-2.0= 7.x-2.1= 7.x-2.2 |
The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which allows remote attackers to obtain sensitive information via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free