Default views in Organic Groups module 6.x-2.x do not properly check permissions, allowing remote attackers to bypass access restrictions
Reporter | Title | Published | Views | Family All 4 |
---|---|---|---|---|
![]() | CVE-2012-2721 | 27 Jun 201200:55 | – | cve |
![]() | Design/Logic Flaw | 27 Jun 201200:55 | – | prion |
![]() | CVE-2012-2721 | 27 Jun 201200:00 | – | cvelist |
![]() | SA-CONTRIB-2012-092 - Organic Groups - Cross Site Scripting (XSS) and Access Bypass | 6 Jun 201200:00 | – | drupal |
Source | Link |
---|---|
securityfocus | www.securityfocus.com/bid/53838 |
drupalcode | www.drupalcode.org/project/og.git/commitdiff/1485708 |
drupal | www.drupal.org/node/1619810 |
secunia | www.secunia.com/advisories/49397 |
drupal | www.drupal.org/node/1619736 |
osvdb | www.osvdb.org/82728 |
openwall | www.openwall.com/lists/oss-security/2012/06/14/3 |
exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/76150 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo