CVE-2020-13668

6.1 mediumEPSS 0.8%

Medium (6.1) in drupal drupal. EPSS 0.8% chance of exploitation in the next 30 days.

Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2022-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

drupal:drupal

References

https://www.drupal.org/sa-core-2020-009
https://www.drupal.org/sa-core-2020-009

Check your stack JSON