Rest/json Project Rest/json vulnerabilities

8 CVEs affecting Rest/json Project Rest/json, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-20005, published 2021-01-01.

More from Rest/json Project.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-20005, published 2021-01-01. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. The REST/JSON project 7.x-1.x for Drupal allows user registration bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
• CVE-2016-20004, published 2021-01-01. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. The REST/JSON project 7.x-1.x for Drupal allows field access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
• CVE-2016-20002, published 2021-01-01. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
• CVE-2016-20001, published 2021-01-01. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
• CVE-2016-20003, published 2021-01-01. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. The REST/JSON project 7.x-1.x for Drupal allows user enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
• CVE-2016-20008, published 2021-01-01. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
• CVE-2016-20006, published 2021-01-01. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. The REST/JSON project 7.x-1.x for Drupal allows blockage of user logins, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
• CVE-2016-20007, published 2021-01-01. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. The REST/JSON project 7.x-1.x for Drupal allows session name guessing, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.