The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to make unspecified use of an API via unknown vectors.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Web_services | Bruno_massa | 6.x-1.0 (including) | 6.x-1.0 (including) |