CVE-2020-13675

score

<0.1

cvss

9.8

epss

1.4%

published

2022-02-11

kev added

—

first seen

2026-10-21

Drupal's JSON:API and REST/File modules contain a file upload access bypass caused by incomplete file validation, letting attackers upload files that bypass validation, exploit requires access to the API endpoints.