Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Drupal Core 9.0.x Multiple Security Bypass Vulnerabilities - CVE-2020-13677 - Vulnerability Database
Drupal

Drupal Core 9.0.x Multiple Security Bypass Vulnerabilities - CVE-2020-13677

Critical
Reference: CVE-2020-13677
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-13677
Title: Drupal Core 9.0.x Multiple Security Bypass Vulnerabilities
Overview:

Drupal Core is prone to multiple security bypass vulnerabilities. Exploiting these issues may allow attackers to upload files that bypass the file validation process implemented by modules on the site or to disclose field data information. Drupal Core versions 9.0.x ranging from 9.0.0 and up to and including 9.0.14 are vulnerable.