Unscored CVE-2013-7068 EUVD-2013-6864GHSA-w8hj-c786-45vp

The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users to bypass group restrictions on nodes wi…

Published Apr 29, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users to bypass group restrictions on nodes with all groups set to optional input via an empty group field.

References

[oss-security] 20131211 Re: CVE request for Drupal core, and contributed modules mailing-list
https://drupal.org/node/2140217
https://drupal.org/node/2140209
[oss-security] 20131206 CVE request for Drupal core, and contributed modules mailing-list