Drupal Core Access bypass vulnerability

🗓️ 24 May 2022 17:49:27Reported by GitHub Advisory DatabaseType

Drupal Core JSON:API Access Bypass Vulnerabilit

Reporter	Title	Published	Views	Family All 25
BDU FSTEC	The vulnerability of the Drupal CMS system’s kernel, related to improper authentication, allows attackers to access confidential data, compromise its integrity, and cause service failures.	20 Sep 202100:00	–	bdu_fstec
IBM Security Bulletins	Security Bulletin: IBM API Connect is vulnerable to arbitrary code execution and security bypass in Drupal (CVE-2020-13664, CVE-2020-13665)	3 Dec 202023:39	–	ibm
Circl	CVE-2020-13665	17 Jun 202021:56	–	circl
CVE	CVE-2020-13665	5 May 202114:14	–	cve
Cvelist	CVE-2020-13665	5 May 202114:14	–	cvelist
Debian CVE	CVE-2020-13665	5 May 202114:14	–	debiancve
Drupal	Drupal core - Less critical - Access bypass - SA-CORE-2020-006	17 Jun 202000:00	–	drupal
Tenable Nessus	Drupal 7.0.x < 7.72 / 8.8.x < 8.8.8 / 8.9.x < 8.9.1 / 9.0.x < 9.0.1 Multiple Vulnerabilities (drupal-2020-06-17)	18 Jun 202000:00	–	nessus
Tenable Nessus	Drupal 9.0.x < 9.0.1 Multiple Vulnerabilities	26 Jun 202000:00	–	nessus
Tenable Nessus	Drupal 8.9.x < 8.9.1 Multiple Vulnerabilities	26 Jun 202000:00	–	nessus

Vulners

Node

drupal drupalRange9.0.0–9.0.1composer

drupal drupalRange8.9.0–8.9.1composer

drupal drupalRange8.8.0–8.8.8composer

drupal coreRange9.0.0–9.0.1composer

drupal coreRange8.9.0–8.9.1composer

drupal coreRange8.8.0–8.8.8composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-13665
drupal	www.drupal.org/sa-core-2020-006
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2020-13665.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2020-13665.yaml
github	www.github.com/advisories/GHSA-wxqp-jwc9-g39x

23 Apr 2024 22:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 27.5

CVSS 3.19.8

EPSS0.01275