Description
The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors.
References
- https://drupal.org/node/2132747
- 55651 third-party-advisory
- https://drupal.org/node/2135267
- 63703 vdb-entry