Security Advisory: Update REST & JSON API Authentication Module to Version 2.0.13

Security system locks data for computer safety generated by AI
vecstock / Freepik

Drupal has released a security advisory for the REST & JSON API Authentication module, highlighting a moderately critical access bypass vulnerability. The issue, reported by Arek Suchecki, affects versions below 2.0.13 and relates to insufficient user access control when using Basic Authentication. Users are advised to upgrade to version 2.0.13 immediately. The update was fixed by solideogloria, Shashank Thigale, and Arek Suchecki, with coordination from Greg Knaddison, Juraj Nemec, David Rothstein, and Michael Hess of the Drupal Security Team. The 8.x-1.x branch is no longer supported and users should migrate to the latest 2.0.x branch.

Source Reference

URL
https://www.drupal.org/sa-contrib-2024-022

Disclosure: This content is produced with the assistance of AI.

Note: The vision of this web portal is to help promote news and stories around the Drupal community and promote and celebrate the people and organizations in the community. We strive to create and distribute our content based on these content policy. If you see any omission/variation on this please let us know in the comments below and we will try to address the issue as best we can.

Advertisement Here

Upcoming Events

Latest Opportunities

Advertisement Here