CVE-2020-13668
Last modified
CVE-2020-13668 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.. EPSS estimates a 0.67% chance of exploitation in the next 30 days.
Description
Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Drupal | Drupal | >= 8.8.0, < 8.8.10 |
| Drupal | Drupal | >= 8.9.0, < 8.9.6 |
| Drupal | Drupal | >= 9.0.0, < 9.0.6 |
References
- https://www.drupal.org/sa-core-2020-009Patch, Vendor Advisory
- https://www.drupal.org/sa-core-2020-009Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-13668?
How severe is CVE-2020-13668?
How do I fix CVE-2020-13668?
Are you affected by CVE-2020-13668?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST