Packagist/drupal/core CVE-2020-13676: unknown, EPSS 0.80%

The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data.

Action: Upgrade drupal/core to 8.9.19 or later.

composer require drupal/core:8.9.19

composer require drupal/core:9.1.13

composer require drupal/core:9.2.6

Affected

Fixed versions

Sources

• osv: DRUPAL-CORE-2021-009
• https://www.drupal.org/sa-core-2021-009

CVE-2020-13676 · published 2021-09-15T15:23:43Z · modified 2026-09-19T17:48:01Z · JSON