vulnerability
Drupal: CVE-2020-13676: Drupal core - Moderately critical - Access bypass - SA-CORE-2021-009
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Feb 11, 2022 | Mar 23, 2022 | Mar 23, 2022 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Feb 11, 2022
Added
Mar 23, 2022
Modified
Mar 23, 2022
Description
The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.
Solution(s)
drupal-upgrade-8_9_1drupal-upgrade-9_1_1drupal-upgrade-9_2_6
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.