vulnerability
Drupal: CVE-2020-13677: Drupal core - Moderately critical - Access Bypass - SA-CORE-2021-010
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:P/I:N/A:N) | 2022-02-11 | 2022-03-23 | 2022-03-23 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
2022-02-11
Added
2022-03-23
Modified
2022-03-23
Description
Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which may result in unintended access bypass. Sites that do not have the JSON:API module enabled are not affected.
Solution(s)
drupal-upgrade-8_9_1drupal-upgrade-9_1_1drupal-upgrade-9_2_6
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.