CVE-2020-13668

Summary

Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.

Affected Software

VendorProductVersion RangeStatus
DrupalCore8.8.x < 8.8.10affected
DrupalCore8.9.x < 8.9.6affected
DrupalCore9.0.x < 9.0.6affected

Weaknesses

  • Access Bypass

ADP Enrichment

CVE Program Container

Additional References

References