VWE-2021-6029 Viewing Source [template]Vulnerability | aka= | severity=Medium | difficulty=Easy | description=Permissions Escalation. A user can bypass a required custom field by saving a meaningless value, then subsequently editing it to be blank. The subsequent edit will not complain that the required field cannot be left blank. | platform=XF2 | lite=no | issueid= | discover-date=January 26, 2021 | patch-date=February 5, 2021 | patches=4.1.1 Patch Level 2 4.1.0 Patch Level 4 4.1.0 RC 3 Patch Level 6 4.1.0 RC 2 Patch Level 7 | workaround= [/template] 543 characters