CVE-2014-9504

2018-02-0117:00:00

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.2%

JSON

The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remote attackers to access child groups via vectors related to membership inheritance.

References

www.openwall.com/lists/oss-security/2015/01/04/6

exchange.xforce.ibmcloud.com/vulnerabilities/99657

www.drupal.org/node/2394979

www.drupal.org/node/2395045