CVE-2020-13668: vulnerability in Drupal Core
Access bypass in Drupal Core 8/9
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.8%
Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.
Affected products
Drupal · CoreRelated CVEs — Drupal Core
In the same product, most dangerous first.
References
https://www.drupal.org/sa-core-2020-009