PT-2022-8503 · Drupal · Drupal Quickedit Module

CVE-2020-13676

·

Published

2021-09-15

·

Updated

2024-03-06

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Drupal QuickEdit module (affected versions not specified)
Description The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module is installed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Access Control

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BIT-DRUPAL-2020-13676
CVE-2020-13676
DRUPAL-CORE-2021-009
GHSA-QFHG-M6R8-XXPJ

Affected Products

Drupal Quickedit Module