TI-2014-07348 CVE-2014-9022 · GHSA-g553-2652-vcjmThe Webform Component Roles module 6.x-1.x before 6.x-1.8 and 7.x-1.x before 7.x-1.8 for…Priority LOW 32The Webform Component Roles module 6.x-1.x before 6.x-1.8 and 7.x-1.x before 7.x-1.8 for Drupal allows remote attackers to bypass the "disabled" restriction and modify read-only components via a crafted form.CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.01523 · Published 2014-11-20 · No fix listed CWE-264