Project: 
RESTful Web Services
Date: 
2024-May-15
Security risk: 
Critical 16 ∕ 25 AC:None/A:None/CI:Some/II:None/E:Proof/TD:All
Vulnerability: 
Access bypass
CVE IDs: 
CVE-2024-13255
Description: 

This module exposes Drupal resources (e.g. entities) as RESTful web services.

The module doesn't sufficiently restrict access for user resources.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: