CVE-2012-5539

Published: Dec 3, 2012Modified: Apr 29, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

The Organic Groups (OG) module 7.x-1.x before 7.x-1.5 for Drupal does not properly maintain pending group memberships, which allows remote authenticated users to post to arbitrary groups by modifying their own account while a pending membership is waiting to be approved.

Affected (11)

Products: Organic Groups Project: Organic Groups

Organic Groups Project

1 product

Organic Groups

Configuration A

11 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Organic Groups Project Organic Groups	Version 7.x-1.0
Organic Groups Project Organic Groups	Version 7.x-1.0 alpha1
Organic Groups Project Organic Groups	Version 7.x-1.1
Organic Groups Project Organic Groups	Version 7.x-1.1 rc1
Organic Groups Project Organic Groups	Version 7.x-1.1 rc2
Organic Groups Project Organic Groups	Version 7.x-1.1 rc3
Organic Groups Project Organic Groups	Version 7.x-1.1 rc4
Organic Groups Project Organic Groups	Version 7.x-1.2
Organic Groups Project Organic Groups	Version 7.x-1.3
Organic Groups Project Organic Groups	Version 7.x-1.4
Organic Groups Project Organic Groups	Version 7.x-1.x dev