Rest/json Project

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Rest/json Project records in CISA KEV

No Rest/json Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rest/json 8 records MEDIUM

Records

8 records

TI-2016-09183 CVE-2016-20005 · GHSA-7qgv-8gh6-qmr8

The REST/JSON project 7.x-1.x for Drupal allows user registration bypass, aka…

MEDIUM 45

The REST/JSON project 7.x-1.x for Drupal allows user registration bypass, aka SA-CONTRIB-2016-033.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01237 Published 2020-12-31 No fix listed CWE-863

TI-2016-09182 CVE-2016-20004 · GHSA-mfgg-fx8q-m7qh

The REST/JSON project 7.x-1.x for Drupal allows field access bypass, aka…

MEDIUM 45

The REST/JSON project 7.x-1.x for Drupal allows field access bypass, aka SA-CONTRIB-2016-033.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01237 Published 2020-12-31 No fix listed CWE-863

TI-2016-09180 CVE-2016-20002 · GHSA-p87m-wmf9-45h3

The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka…

MEDIUM 45

The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka SA-CONTRIB-2016-033.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01237 Published 2020-12-31 No fix listed CWE-863

TI-2016-09179 CVE-2016-20001 · GHSA-f9x8-qhfh-2jh9

The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka…

MEDIUM 45

The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka SA-CONTRIB-2016-033.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01237 Published 2020-12-31 No fix listed CWE-863

TI-2016-09186 CVE-2016-20008 · GHSA-h7jm-76x4-67c7

The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka…

LOW 35

The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01096 Published 2020-12-31 No fix listed

TI-2016-09185 CVE-2016-20007 · GHSA-7rwq-q3mj-f9qw

The REST/JSON project 7.x-1.x for Drupal allows session name guessing, aka…

LOW 35

The REST/JSON project 7.x-1.x for Drupal allows session name guessing, aka SA-CONTRIB-2016-033.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01038 Published 2020-12-31 No fix listed CWE-613

TI-2016-09184 CVE-2016-20006 · GHSA-jxpr-3vxp-fp3x

The REST/JSON project 7.x-1.x for Drupal allows blockage of user logins, aka…

LOW 35

The REST/JSON project 7.x-1.x for Drupal allows blockage of user logins, aka SA-CONTRIB-2016-033.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01068 Published 2020-12-31 No fix listed

TI-2016-09181 CVE-2016-20003 · GHSA-wc7g-h7q8-29g2

The REST/JSON project 7.x-1.x for Drupal allows user enumeration, aka SA-CONTRIB-2016-033.

LOW 35

The REST/JSON project 7.x-1.x for Drupal allows user enumeration, aka SA-CONTRIB-2016-033.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01096 Published 2020-12-31 No fix listed

Open these records in search →

Critical	4
High	4
Medium	0
Low	0
No CVSS	0