CVE-2013-7065
The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the og_group_ref field.
Ver en NVDSeveridad
N/A
EPSS
Probabilidad de explotación (próx. 30 días): 0.0023 (0.2%)
Percentil: 45.3%
EPSS: 2026-05-06
Afecta
organic_groups_project:organic_groupsDescripción técnica
The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the og_group_ref field.
Publicada: 29/4/2014, 14:38:43
Última modificación: 6/5/2026, 22:30:45
Referencias
- http://www.openwall.com/lists/oss-security/2013/12/06/7
- http://www.openwall.com/lists/oss-security/2013/12/12/1
- https://drupal.org/node/2140209
- https://drupal.org/node/2140217
- http://www.openwall.com/lists/oss-security/2013/12/06/7
- http://www.openwall.com/lists/oss-security/2013/12/12/1
- https://drupal.org/node/2140209
- https://drupal.org/node/2140217