https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T18:36:31.522788+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2009-4533 fkie_cve-2009-4533 2026-10-09T18:36:31.528128+00:00

The Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, does not prevent caching of a page that contains token placeholders for a default value, which allows remote attackers to read session variables via unspecified vectors.

 https://vulnerability.circl.lu/vuln/ghsa-gfvp-mq24-36ch GHSA-gfvp-mq24-36ch 2026-10-09T18:36:31.528226+00:00

The Webform module 5.x before 5.x-2.8 and 6.x before 6.x-2.8, a module for Drupal, does not prevent caching of a page that contains token placeholders for a default value, which allows remote attackers to read session variables via unspecified vectors.

 https://vulnerability.circl.lu/vuln/gsd-2009-4533 gsd-2009-4533 2026-10-09T18:36:31.528263+00:00 gsd-2009-4533