VDB
CVE-2020-13675
CVE-2020-13675
PUBLISHED
Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all file validation, which causes an access bypass vulnerability. An attacker might be able to upload files that bypass the file validation process implemented by modules on the site.
EPSS 0.80% · 74.4th percentile
Risk Scores
EPSS Score
0.80%
74.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | drupal | 8.0.0, 9.1.0, 9.2.0 |
| Bitnami | drupal | 9.1.0, 9.2.0, 8.0.0 |
Exploit Intelligence
Timeline
- Sep 15, 2021 CVE Published
- Feb 12, 2022 EPSS Score
- Apr 5, 2022 EPSS Score
- May 28, 2022 EPSS Score
- Jul 20, 2022 EPSS Score
- Sep 10, 2022 EPSS Score
- Nov 2, 2022 EPSS Score
- Dec 24, 2022 EPSS Score
- Feb 14, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 7, 2023 EPSS Score
- May 30, 2023 EPSS Score