Vulnerability advisory
BIT-drupal-2020-13668
Access bypass in Drupal Core 8/9
Also known as CVE-2020-13668GHSA-m6q5-wv4x-fv6h
Severity
Severity not reported.
Affected versions
drupal Bitnami
| Affected | Fixed in |
|---|---|
8.8.0 to before 8.8.10 | 8.8.10 |
8.9.0 to before 8.9.6 | 8.9.6 |
9.0.0 to before 9.0.6 | 9.0.6 |
Severity for this package
| |
Description
Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.