In its warning, Drupal said a vulnerability in this API allows an attacker to send specially crafted requests resulting in ...