CVE-2020-13665

🗓️ 05 May 2021 14:14:09Reported by drupalType

Access bypass vulnerability in Drupal Core JSON:API read/write mod

Reporter	Title	Published	Views	Family All 25
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel, related to improper authentication, allows attackers to access confidential data, compromise its integrity, and cause service failures.	20 Sep 202100:00	–	bdu_fstec
IBM Security Bulletins	Security Bulletin: IBM API Connect is vulnerable to arbitrary code execution and security bypass in Drupal (CVE-2020-13664, CVE-2020-13665)	3 Dec 202023:39	–	ibm
Circl	CVE-2020-13665	17 Jun 202021:56	–	circl
CVE	CVE-2020-13665	5 May 202114:14	–	cve
Debian CVE	CVE-2020-13665	5 May 202114:14	–	debiancve
Drupal	Drupal core - Less critical - Access bypass - SA-CORE-2020-006	17 Jun 202000:00	–	drupal
Tenable Nessus	Drupal 7.0.x < 7.72 / 8.8.x < 8.8.8 / 8.9.x < 8.9.1 / 9.0.x < 9.0.1 Multiple Vulnerabilities (drupal-2020-06-17)	18 Jun 202000:00	–	nessus
Tenable Nessus	Drupal 9.0.x < 9.0.1 Multiple Vulnerabilities	26 Jun 202000:00	–	nessus
Tenable Nessus	Drupal 8.9.x < 8.9.1 Multiple Vulnerabilities	26 Jun 202000:00	–	nessus
Tenable Nessus	Drupal 8.8.x < 8.8.8 Multiple Vulnerabilities	26 Jun 202000:00	–	nessus

[
  {
    "product": "Drupal Core",
    "vendor": "Drupal",
    "versions": [
      {
        "lessThan": "8.8.8",
        "status": "affected",
        "version": "8.8.x",
        "versionType": "custom"
      },
      {
        "lessThan": "8.9.1",
        "status": "affected",
        "version": "8.9.x",
        "versionType": "custom"
      },
      {
        "lessThan": "9.0.1",
        "status": "affected",
        "version": "9.0.x",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
drupal	www.drupal.org/sa-core-2020-006

05 May 2021 14:14Current

9.3High risk

Vulners AI Score9.3

EPSS0.00581