CVE-2020-13677

score

<0.1

cvss

7.5

epss

1.2%

published

2022-02-11

kev added

—

first seen

2026-10-21

Drupal core JSON:API module contains an access restriction bypass caused by improper content access control, letting unauthorized users access restricted content, exploit requires specific circumstances where the module is enabled.