Description
The Organic Groups (OG) Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors.
References
- ADV-2009-2920 vdb-entry
- http://drupal.org/node/604354
- 36685 vdb-entry
- 58947 vdb-entry
- http://drupal.org/node/604514
- ogvocab-membership-security-bypass(53780) vdb-entry
- 37060 third-party-advisory