Design/Logic Flaw

2014-04-2914:38:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

67.8%

JSON

The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the og_group_ref field.

CPENameOperatorVersion
organic_groupseq7.x-2.x dev
organic_groupseq7.x-2.0 beta1
organic_groupseq7.x-2.0 rc1
organic_groupseq7.x-2.0 rc2
organic_groupseq7.120.22
organic_groupseq7.x-2.0 alpha2
organic_groupseq7.x-2.0 rc4
organic_groupseq7.x-2.0 alpha3
organic_groupseq7.x-2.0 beta2
organic_groupseq7.x-2.0 beta4

Name	Operator	Version
organic_groups	eq	7.x-2.x dev
organic_groups	eq	7.x-2.0 beta1
organic_groups	eq	7.x-2.0 rc1
organic_groups	eq	7.x-2.0 rc2
organic_groups	eq	7.120.22
organic_groups	eq	7.x-2.0 alpha2
organic_groups	eq	7.x-2.0 rc4
organic_groups	eq	7.x-2.0 alpha3
organic_groups	eq	7.x-2.0 beta2
organic_groups	eq	7.x-2.0 beta4