CVE-2020-13676CWE-284

The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data

published February 11, 2022

CVSS
—
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00805 · 56.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-02-11T15:50Z
EPSS history
Timeline
  • 11 FEB 15:50Z
    The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data
    cvelistv5