vulnerability
Drupal: CVE-2020-13676: Drupal core - Moderately critical - Access bypass - SA-CORE-2021-009
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Feb 11, 2022 | Mar 23, 2022 | Aug 11, 2025 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Feb 11, 2022
Added
Mar 23, 2022
Modified
Aug 11, 2025
Description
The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.
Solutions
drupal-upgrade-8_9_1drupal-upgrade-9_1_1drupal-upgrade-9_2_6
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.