TI-2012-04671 CVE-2012-5554 · GHSA-qrg9-7x38-vcrmThe default configuration for the Webform CiviCRM Integration module 7.x-3.x before…Priority LOW 26The default configuration for the Webform CiviCRM Integration module 7.x-3.x before 7.x-3.2 has "Enforce Permissions" disabled, which allows remote attackers to obtain contact information by reading webforms.CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01369 · Published 2012-12-03 · No fix listed CWE-200
