CVE-2014-9022

The CVE-2014-9022 issue affects Drupal’s Webform Component Roles module: versions 6.x-1.x before 6.x-1.8 and 7.x-1.x before 7.x-1.8. The root cause is that the module allows remote attackers to bypass the disabled restriction and modify read-only webform components via a crafted form. Impact is r...