Description
Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6.
Remediation
References
Related Vulnerabilities
WordPress Plugin Meta Slider and Carousel with Lightbox Cross-Site Request Forgery (1.6.2)
MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-2079)
MySQL CVE-2020-2577 Vulnerability (CVE-2020-2577)
WordPress Plugin MasterStudy LMS-for Online Courses and Education Local File Inclusion (3.3.0)
WordPress Plugin File Manager Advanced Shortcode Arbitrary File Upload (2.5.3)