Cross site request forgery (csrf)

2013-12-1904:24:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.5%

JSON

The OG Features module 6.x-1.x before 6.x-1.4 for Drupal does not properly override pages that have an access callback set to false, which allows remote attackers to bypass intended access restrictions via a request.

CPENameOperatorVersion
og_featureseq6.x-1.0 beta1
og_featureseq6.120.10
og_featureseq6.x-1.0 beta3
og_featureseq6.x-1.0 beta4
og_featureseq6.x-1.0 beta2
og_featureseq6.120.11
og_featureseq6.120.12
og_featureseq6.120.13
og_featureseq6.x-1.x dev

Name	Operator	Version
og_features	eq	6.x-1.0 beta1
og_features	eq	6.120.10
og_features	eq	6.x-1.0 beta3
og_features	eq	6.x-1.0 beta4
og_features	eq	6.x-1.0 beta2
og_features	eq	6.120.11
og_features	eq	6.120.12
og_features	eq	6.120.13
og_features	eq	6.x-1.x dev