The Entityform Block module 7.x-1.x prior to 7.x-1.3 for Drupal does not properly check permissions when a form is locked to a role, which allows remote malicious users to obtain access to certain entityforms via unspecified vectors.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
entityform block project entityform block 7.x-1.2 |
||
entityform block project entityform block 7.x-1.1 |
||
entityform block project entityform block 7.x-1.x-dev |
||
entityform block project entityform block 7.x-1.0 |
Vulmon