CVE-2014-9022

MEDIUM · CVSS 6.4 EPSS 1.52%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-11-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2014-9022

Severity

MEDIUM

CVSS

6.4

EPSS

1.52%

Original NVD Description

The Webform Component Roles module 6.x-1.x before 6.x-1.8 and 7.x-1.x before 7.x-1.8 for Drupal allows remote attackers to bypass the "disabled" restriction and modify read-only components via a crafted form.