Project:
Vulnerability:
Access bypass
CVE IDs:
CVE-2020-13665
Description:
JSON:API PATCH requests may bypass validation for certain fields.
By default, JSON:API works in a read-only mode which makes it impossible to exploit the vulnerability. Only sites that have the read_only set to FALSE under jsonapi.settings config are vulnerable.
Solution:
Install the latest version:
- If you are using Drupal 8.8.x, upgrade to .
- If you are using Drupal 9.0.x, upgrade to
Fixed By:
- of the Drupal Security Team
Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf drupal.org.
SOCIAL SHARE CARD GENERATOR