CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS
Percentile
81.6%
The Drupal Commons distribution is a tool for building social, group-based collaboration communities. The Commons Wikis module is used by the distribution to provide specific wiki functionality.
Versions 3.0 and earlier of the Commons Wikis module is vulnerable to an access bypass and privilege escalation vulnerability that allows anonymous users to post content into groups.
Drupal core is not affected. If you do not use the contributed Commons Wikis module, there is nothing you need to do.
Install the latest version:
Also see the Commons Wikis project page.
Commons project maintainers:
Commons project maintainers:
drupal.org/contact
drupal.org/node/1954768
drupal.org/node/1954948
drupal.org/project/commons_wikis
drupal.org/security-team
drupal.org/security-team/risk-levels
drupal.org/security/secure-configuration
drupal.org/user/1014606
drupal.org/user/36762
drupal.org/user/45640
drupal.org/user/69959/
drupal.org/user/91990
drupal.org/writing-secure-code