Project: 
Spamicide
Date: 
2020-April-08
Security risk: 
Critical 18∕25 AC:None/A:None/CI:Some/II:Some/E:Theoretical/TD:All
Vulnerability: 
Access bypass
Description: 

The Spamicide module protects Drupal forms with a form field that is hidden from normal users, but visible to spam bots.

The module doesn't require appropriate permissions for administrative pages leading to an Access Bypass.

Solution: 

Install the latest version:

Also see the Spamicide project page.

Reported By: 
Fixed By: 
Coordinated By: