CVE-2026-84921

This module enables you to delete Webform submissions in bulk using a specified date range. The module doesn't sufficiently restrict access to the de...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

This module enables you to delete Webform submissions in bulk using a specified date range.

The module doesn't sufficiently restrict access to the delete form.

A separate PHP fatal error issue may prevent exploitation in practice on Drupal 10+.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

Packagist:https://packages.drupal.org/8 drupal/webform_submissions_delete

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0"}],"database_specific":{"constraint":"<1.2.0"}}]