Clean Restful
Monthly
Authentication bypass in the Drupal Clean RESTful contributed module (cpe:2.3:a:drupal:clean_restful:*:*:*:*:*:*:*:*) enables network-reachable attackers with high existing privileges to circumvent authentication controls exposed via the module's REST API endpoints, resulting in high confidentiality and integrity impact against the Drupal application. All versioned releases of the module are affected per the wildcard CPE. No public exploit code has been identified at time of analysis, and CISA has not added this vulnerability to the Known Exploited Vulnerabilities catalog, though SSVC rates the technical impact as total.
Authentication bypass in the Drupal Clean RESTful contributed module (cpe:2.3:a:drupal:clean_restful:*:*:*:*:*:*:*:*) enables network-reachable attackers with high existing privileges to circumvent authentication controls exposed via the module's REST API endpoints, resulting in high confidentiality and integrity impact against the Drupal application. All versioned releases of the module are affected per the wildcard CPE. No public exploit code has been identified at time of analysis, and CISA has not added this vulnerability to the Known Exploited Vulnerabilities catalog, though SSVC rates the technical impact as total.