CVEvulnerability

CVE-2014-9022

6.4 MEDIUM Published 2014-11-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-11-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-264

Description

The Webform Component Roles module 6.x-1.x before 6.x-1.8 and 7.x-1.x before 7.x-1.8 for Drupal allows remote attackers to bypass the "disabled" restriction and modify read-only components via a crafted form.

Affected configurations

• web component roles project web component roles 6.x-1.5 • web component roles project web component roles 6.x-1.6 • web component roles project web component roles 7.x-1.0 • web component roles project web component roles 7.x-1.1 • web component roles project web component roles 7.x-1.2 • web component roles project web component roles 7.x-1.3 • web component roles project web component roles 7.x-1.4 • web component roles project web component roles 7.x-1.5 • web component roles project web component roles 7.x-1.6 • web component roles project web component roles 7.x-1.7

Related

Weakness · not in database (1)

References