Low
3.1
Webform - Less critical - Access bypass - SA-CONTRIB-2026-165
CVE-2026-96369
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| Drupal | Webform |
≥ 0.0.0, < 6.2.12 ≥ 6.3.0, < 6.3.1 |
6.2.12 6.3.1 |
Original description The description as published by the source.
Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory nvd.nist.gov
- advisory github.com
- web drupal.org
- web github.com
- web git.drupalcode.org
- web drupal.org