Threats tagged 'drupal-contrib-2026-298'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-122067Rest api authentication · The REST & JSON API Authentication module provides API authentication for High2026-11-04GCVE DatabaseCVE-2026-122067 The REST & JSON API Authentication module for Drupal sites has a vulnerability where it does not properly reject requests if the API key is unconfigured. This flaw allows unauthenticated attackers to bypass authentication and potentially access or modify protected resources. The issue affects sites that have API authentication enabled but have not generated an application API key. A fix is available in version 3.2.1. Vulnerability #drupal-contrib-2026-298 #packagist-https-packages-drupa	GCVE Database	2026-11-04

Page 1 of 1