CVE-2020-13663

CVE-2020-13663: falha em Drupal Core

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Drupal core+ Monitorar drupal/core

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.7%
Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities.
Produtos afetados
Drupal · Drupal Core
CVEs relacionadas — Drupal Core

No mesmo produto, das mais perigosas para as menos.

CVE-2019-6340HIGHDrupal core - Highly critical - Remote Code ExecutionEPSS 92.0%KEVCVE-2020-13671HIGHCVE-2020-13671EPSS 36.2%KEVCVE-2017-6381—CVE-2017-6381EPSS 3.9%CVE-2020-13664—CVE-2020-13664EPSS 3.0%CVE-2020-13666—CVE-2020-13666EPSS 2.9%CVE-2019-6342—Drupal core - Critical - Access bypass - SA-CORE-2019-008EPSS 2.2%