| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/rest_api_authentication | < 3.2.1 | 3.2.1 |
The REST & JSON API Authentication module provides API authentication for Drupal sites.
The module does not properly reject requests when an API key is unconfigured, allowing unauthenticated attackers to bypass authentication and potentially access or modify protected resources. Sites are affected when API authentication is enabled but the application API key has not been generated.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free