CVE-2012-5556

Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.1 and 7.x-2.x before 7.x-2.0-alpha3 for Drupal allow remote attackers to hijack the authentication of arbitrary users via unknown vectors.

🔗 References (8)

• secalert@redhathttp://drupal.org/node/1840722
• secalert@redhathttp://drupal.org/node/1840728
• secalert@redhathttp://drupal.org/node/1840740
• secalert@redhathttp://www.openwall.com/lists/oss-security/2012/11/20/4
• af854a3a-2127-422b-91ae-364da2661108http://drupal.org/node/1840722
• af854a3a-2127-422b-91ae-364da2661108http://drupal.org/node/1840728
• af854a3a-2127-422b-91ae-364da2661108http://drupal.org/node/1840740
• af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2012/11/20/4