Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-13668

Access bypass in Drupal Core 8/9

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
drupal

Description

Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Drupal Core

  • 8.8.x to < 8.8.10affected
  • 8.9.x to < 8.9.6affected
  • 9.0.x to < 9.0.6affected

References