CVE-2013-7065

The Organic Groups OG module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the oggroupref field...

PT-2014-3257

Name of the Vulnerable Software and Affected Versions Organic Groups OG module versions 7.x-2.x through 7.x-2.2 Description The issue allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, such as the og group ref field. Recommendations For...

CVE-2013-7065: Undefined Security Weakness

The Organic Groups OG module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the oggroupref field...