vulnerability

Ubuntu: (CVE-2020-13663): drupal7 vulnerability

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
7	(AV:N/AC:M/Au:N/C:P/I:P/A:P)	Jun 11, 2021	Jun 26, 2025	Aug 18, 2025

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

Published

Jun 11, 2021

Added

Jun 26, 2025

Modified

Aug 18, 2025

Description

Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities.

Solution

no-fix-ubuntu-package

References

CVE-2020-13663
https://attackerkb.com/topics/CVE-2020-13663
CWE-352
URL-https://git.drupalcode.org/project/drupal/-/commit/3999b8f658bf2ef8e96a7ee8ccb279c5d3073006
URL-https://www.cve.org/CVERecord?id=CVE-2020-13663
URL-https://www.drupal.org/sa-core-2020-004

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today