vulnerability
Drupal: CVE-2020-13676: Drupal core - Moderately critical - Access bypass - SA-CORE-2021-009
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | 2022-02-11 | 2022-03-23 | 2022-03-23 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
2022-02-11
Added
2022-03-23
Modified
2022-03-23
Description
The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.
Solution(s)
drupal-upgrade-8_9_1drupal-upgrade-9_1_1drupal-upgrade-9_2_6
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.