Miguel Ferreira

Insufficient permission checks for webform and webform submission entities when retrieving webform elements or fields allow for forceful browsing. This occurs within the module used to retrieve and submit webforms via REST.