CVE-2016-20008: Rest/json Project Rest/json

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.

Affected products

• Rest/json Project Rest/json: up to and including 7.x-1.5

Published 2021-01-01. Last modified 2026-06-17.