VULNERABILITY INTELLIGENCE

CVE-2020-13668

CVSS score6.1 MEDIUM
EPSS probability0.79%
CISA KEVNot currently listed
Published2022-02-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references