VULNERABILITY INTELLIGENCE

CVE-2020-13676

CVSS score6.5 MEDIUM
EPSS probability0.80%
CISA KEVNot currently listed
Published2022-02-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.

Weakness classification

  • mlhess@drupal.org: CWE-284
  • nvd@nist.gov: CWE-863

Primary references