CVE-2017-6919

Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the…

published April 20, 2017

CVSS
—
EPSS
2%
Percentile
75.5
In the wild
Unconfirmed
What it is

Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the site allows PATCH requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01606 · 75.5th percentile
Published
2017-04-20T02:43Z
EPSS history
Timeline
  • 20 APR 02:43Z
    Drupal 8 before 8.2.8 and 8.3 before 8.3.1 allows critical access bypass by authenticated users if the RESTful Web Services (rest) module is enabled and the…
    cvelistv5