CVE-2013-7067

Published: Dec 19, 2013Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The OG Features module 6.x-1.x before 6.x-1.4 for Drupal does not properly override pages that have an access callback set to false, which allows remote attackers to bypass intended access restrictions via a request.

Affected (9)

Products: Mike Stefanello: Og Features

Mike Stefanello

1 product

Og Features

Configuration A

9 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Mike Stefanello Og Features	Version 6.x-1.0
Mike Stefanello Og Features	Version 6.x-1.0 beta1
Mike Stefanello Og Features	Version 6.x-1.0 beta2
Mike Stefanello Og Features	Version 6.x-1.0 beta3
Mike Stefanello Og Features	Version 6.x-1.0 beta4
Mike Stefanello Og Features	Version 6.x-1.1
Mike Stefanello Og Features	Version 6.x-1.2
Mike Stefanello Og Features	Version 6.x-1.3
Mike Stefanello Og Features	Version 6.x-1.x dev