[Security-news] RESTful - Critical - Remote code execution - SA-CONTRIB-2019-041

[security-news at drupal.org]

View online: https://www.drupal.org/sa-contrib-2019-041

Project: RESTful [1]
Date: 2019-March-20
Security risk: *Critical* 18∕25
AC:Complex/A:User/CI:All/II:All/E:Exploit/TD:Uncommon [2]
Vulnerability: Remote code execution

Description: 
This resolves issues described in SA-CORE-2019-003 [3] for this module.

Solution: 
   * If you use the RESTful module for Drupal 7.x, upgrade to RESTful 7.x-1.10
     [4] or  RESTful 7.x-2.17 [5]


[1] https://www.drupal.org/project/restful
[2] https://www.drupal.org/security-team/risk-levels
[3] https://www.drupal.org/sa-core-2019-003
[4] https://www.drupal.org/project/restful/releases/7.x-1.10
[5] https://www.drupal.org/project/restful/releases/7.x-2.17