Unscored CVE-2013-7065 EUVD-2013-6861GHSA-9p3r-66mx-h87h

The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrar…

Published Apr 29, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the og_group_ref field.

References

[oss-security] 20131211 Re: CVE request for Drupal core, and contributed modules mailing-list
https://drupal.org/node/2140217
https://drupal.org/node/2140209
[oss-security] 20131206 CVE request for Drupal core, and contributed modules mailing-list