CVE-2012-5556

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-12-03 · updated 2026-06-16
Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.1 and 7.x-2.x before 7.x-2.0-alpha3 for Drupal allow remote attackers to hijack the authentication of arbitrary users via unknown vectors.

Affected products

RESTful Web Services: 7.x-1.0, 7.x-1.0-beta1, 7.x-1.0-beta2, 7.x-1.x-dev, 7.x-2.0-alpha1, 7.x-2.0-alpha2 (+1)

References

http://drupal.org/node/1840722
http://drupal.org/node/1840728
http://drupal.org/node/1840740
http://www.openwall.com/lists/oss-security/2012/11/20/4
http://drupal.org/node/1840722
http://drupal.org/node/1840728
http://drupal.org/node/1840740
http://www.openwall.com/lists/oss-security/2012/11/20/4

Get alerted when CVE-2012-5556 or the next vulnerability affects your stack