CVE-2020-13675

Name of the Vulnerable Software and Affected Versions Drupal (affected versions not specified)

Description The issue concerns the JSON:API and REST/File modules in Drupal, which allow file uploads through their HTTP APIs. However, these modules do not correctly run all file validation, leading to an access bypass issue. An attacker could potentially upload files that bypass the validation process implemented by other modules on the site.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.