Security Advisory

CVE-2017-6919

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-20 02:43:00

Last updated 2024-08-05 15:49:02

Assigner drupal

CVSS score not scored

State PUBLISHED

Description

Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the site allows PATCH requests.

← Browse all CVEs View on cve.org ↗