CVE-2012-5539

2022-10-0316:15:32

CWE-264

[email protected]

web.nvd.nist.gov

organic groups

og module

drupal

cve-2012-5539

security vulnerability

6.6 Medium

AI Score

Confidence

Low

3.5 Low

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

45.0%

JSON

The Organic Groups (OG) module 7.x-1.x before 7.x-1.5 for Drupal does not properly maintain pending group memberships, which allows remote authenticated users to post to arbitrary groups by modifying their own account while a pending membership is waiting to be approved.

Affected configurations

NVD

Node

organic_groups_projectorganic_groupsMatch7.x-1.0

organic_groups_projectorganic_groupsMatch7.x-1.0alpha1

organic_groups_projectorganic_groupsMatch7.x-1.1

organic_groups_projectorganic_groupsMatch7.x-1.1rc1

organic_groups_projectorganic_groupsMatch7.x-1.1rc2

organic_groups_projectorganic_groupsMatch7.x-1.1rc3

organic_groups_projectorganic_groupsMatch7.x-1.1rc4

organic_groups_projectorganic_groupsMatch7.x-1.2

organic_groups_projectorganic_groupsMatch7.x-1.3

organic_groups_projectorganic_groupsMatch7.x-1.4

organic_groups_projectorganic_groupsMatch7.x-1.xdev

AND

drupaldrupalMatch-

CPENameOperatorVersion
organic_groups_project:organic_groupsorganic groups project organic groupseq7.x-1.0
organic_groups_project:organic_groupsorganic groups project organic groupseq7.x-1.1
organic_groups_project:organic_groupsorganic groups project organic groupseq7.x-1.2
organic_groups_project:organic_groupsorganic groups project organic groupseq7.x-1.3
organic_groups_project:organic_groupsorganic groups project organic groupseq7.x-1.4
organic_groups_project:organic_groupsorganic groups project organic groupseq7.x-1.x

CPE	Name	Operator	Version
organic_groups_project:organic_groups	organic groups project organic groups	eq	7.x-1.0
organic_groups_project:organic_groups	organic groups project organic groups	eq	7.x-1.1
organic_groups_project:organic_groups	organic groups project organic groups	eq	7.x-1.2
organic_groups_project:organic_groups	organic groups project organic groups	eq	7.x-1.3
organic_groups_project:organic_groups	organic groups project organic groups	eq	7.x-1.4
organic_groups_project:organic_groups	organic groups project organic groups	eq	7.x-1.x