CVE-2020-13663

CVSS 3.1: 8.8 high
EPSS: <1%p51
Published: Jun 11, 2021 · Jun 11, 2021
Modified: Jun 17, 2026

Analyze CVE-2020-13663 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities.

Vendors: drupal

Products: drupal

Ecosystems: Drupal

Weakness: CWE-352

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news

3 stories

Drupal fixes three vulnerabilities, including one RCE

Help Net SecuritySep 18, 09:34 UTC · Sep 18, 2024VulnerabilityCVE-2020-13663 CVE-2020-13664 CVE-2020-136652 · 1 read

Week in review: DDoS attack trends, WannaCry lessons, new issue of (IN)SECURE

Help Net SecurityJun 21, 00:00 UTC · Jun 21, 2020RansomwareCVE-2020-136632 · 1 read

Drupal addresses critical code execution vulnerability

Security AffairsJun 18, 13:59 UTC · Jun 18, 2020VulnerabilityCVE-2020-13664 CVE-2020-136631 · 1 read