CVE-2013-1946

Published: Apr 6, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.0-alpha5 for Drupal, when page caching is enabled and anonymous users are assigned RESTWS permissions, allows remote attackers to cause a denial of service via a GET request with an HTTP Accept header set to a non-HTML type, which can "interfere with Drupal's page cache."

Affected (4)

Products: Restful Web Services Project: Restful Web Services

Restful Web Services Project

1 product

Restful Web Services

Configuration A

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Restful Web Services Project Restful Web Services	Version 7.x-1.1
Restful Web Services Project Restful Web Services	Version 7.x-1.2
Restful Web Services Project Restful Web Services	Version 7.x-2.0 alpha3
Restful Web Services Project Restful Web Services	Version 7.x-2.0 alpha4