CVE-2020-13668

score

<0.1

cvss

6.1

epss

0.8%

published

2022-02-11

kev added

—

first seen

2026-10-21

Drupal Core < 8.8.10, < 8.9.6, < 9.0.6 contains an access bypass caused by improper HTML rendering in affected forms, letting attackers bypass access controls, exploit requires access to affected forms.