CVE-2013-7065

Published: Apr 29, 2014Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the og_group_ref field.

Affected (15)

Products: Organic Groups Project: Organic Groups

Organic Groups Project

1 product

Organic Groups

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Organic Groups Project Organic Groups	Version 7.x-2.0
Organic Groups Project Organic Groups	Version 7.x-2.0 alpha1
Organic Groups Project Organic Groups	Version 7.x-2.0 alpha2
Organic Groups Project Organic Groups	Version 7.x-2.0 alpha3
Organic Groups Project Organic Groups	Version 7.x-2.0 beta1
Organic Groups Project Organic Groups	Version 7.x-2.0 beta2
Organic Groups Project Organic Groups	Version 7.x-2.0 beta3
Organic Groups Project Organic Groups	Version 7.x-2.0 beta4
Organic Groups Project Organic Groups	Version 7.x-2.0 rc1
Organic Groups Project Organic Groups	Version 7.x-2.0 rc2
Organic Groups Project Organic Groups	Version 7.x-2.0 rc3
Organic Groups Project Organic Groups	Version 7.x-2.0 rc4
Organic Groups Project Organic Groups	Version 7.x-2.1
Organic Groups Project Organic Groups	Version 7.x-2.2
Organic Groups Project Organic Groups	Version 7.x-2.x dev