Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Drupal Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2020-13674 - Vulnerability Database
Drupal

Drupal Cross-Site Request Forgery (CSRF) Vulnerability - CVE-2020-13674

Medium
Reference: CVE-2020-13674
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-13674
Title: Drupal Cross-Site Request Forgery (CSRF) Vulnerability
Overview:

The QuickEdit module does not properly validate access to routes which could allow cross-site request forgery under some circumstances and lead to possible data integrity issues. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed. Removing the quotaccess in-place editingquot permission from untrusted users will not fully mitigate the vulnerability.