PT-2020-8024

CVE-2016-20005

·

Published

2020-12-31

·

Updated

2021-01-07

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: REST/JSON project versions 7.x-1.x for Drupal
Description: The issue allows user registration bypass. This project is not covered by Drupal's security advisory policy.
Recommendations: For versions 7.x-1.x, consider disabling user registration functionality until a patch is available. Restrict access to the REST/JSON project to minimize the risk of exploitation. Avoid using the REST/JSON project for user registration until the issue is resolved.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾