RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2024-019

Project: RESTful Web ServicesDate: 2024-May-15Security risk: Critical 16∕25 AC:None/A:None/CI:Some/II:None/E:Proof/TD:AllVulnerability: Access bypassDescription: This module exposes Drupal resources (e.g. entities) as RESTful web services.
The module doesn't sufficiently restrict access for user resources.Solution: Install the latest version:

Reported By: 

Fixed By: 

Coordinated By: 

Path to article https://www.drupal.org/sa-contrib-2024-019