Unrated severityNVD Advisory· Published Mar 19, 2013· Updated Jun 16, 2026
CVE-2013-0205
CVE-2013-0205
Description
Cross-site request forgery (CSRF) vulnerability in the RESTful Web Services (restws) module 7.x-1.x before 7.x-1.2 and 7.x-2.x before 7.x-2.0-alpha4 for Drupal allows remote attackers to hijack the authentication of arbitrary users via unknown vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.0:alpha1:*:*:*:drupal:*:*+ 4 more
- cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.0:alpha1:*:*:*:drupal:*:*
- cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.0:alpha2:*:*:*:drupal:*:*
- cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.0:alpha3:*:*:*:drupal:*:*
- cpe:2.3:a:restful_web_services_project:restful_web_services:7.x-2.0:-:*:*:*:drupal:*:*
- cpe:2.3:a:restful_web_services_project:restful_web_services:*:*:*:*:*:drupal:*:*range: >=7.x-1.0,<7.x-1.2
Patches
Vulnerability mechanics
References
4- drupal.org/node/1890212nvdPatchVendor Advisory
- drupal.org/node/1890216nvdPatchVendor Advisory
- www.openwall.com/lists/oss-security/2013/01/21/5nvdMailing ListThird Party Advisory
- drupal.org/node/1890222nvdVendor Advisory
News mentions
0No linked articles in our index yet.