Project: 
Webform
Date: 
2020-May-06
Security risk: 
Critical 15∕25 AC:None/A:None/CI:Some/II:None/E:Theoretical/TD:All
Vulnerability: 
Access bypass
Affected versions: 
<5.11.0
Description: 

This webform module enables you to build 'Term select' and 'Term checkboxes' elements.

The module doesn't sufficiently check term 'view' access when rendering the 'Term select' and 'Term checkboxes' elements. Unpublished terms will always appear in the 'Term select' and 'Term checkboxes' elements.

Solution: 

Install the latest version:

Also see the Webform project page.

Reported By: 
Fixed By: 
Coordinated By: