CVEvulnerability

CVE-2020-13668

6.1 MEDIUM Published 2022-02-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-02-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.

Affected configurations

• drupal drupal (>= 8.8.0 < 8.8.10) • drupal drupal (>= 8.9.0 < 8.9.6) • drupal drupal (>= 9.0.0 < 9.0.6)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References