VULNERABILITY INTELLIGENCE

CVE-2016-20007

CVSS score7.5 HIGH

EPSS probability1.04%

CISA KEVNot currently listed

Published2021-01-01

Last modified2026-06-17

Description

The REST/JSON project 7.x-1.x for Drupal allows session name guessing, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.