CVE-2013-7068

Published: Apr 29, 2014Modified: May 6, 2026

4.9

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Exploitability: 6.8 / Impact: 4.9

Source: NVD

Description

The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users to bypass group restrictions on nodes with all groups set to optional input via an empty group field.

Affected (15)

Products: Organic Groups Project: Organic Groups

Organic Groups Project

1 product

Organic Groups

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Organic Groups Project Organic Groups	Version 7.x-2.0
Organic Groups Project Organic Groups	Version 7.x-2.0 alpha1
Organic Groups Project Organic Groups	Version 7.x-2.0 alpha2
Organic Groups Project Organic Groups	Version 7.x-2.0 alpha3
Organic Groups Project Organic Groups	Version 7.x-2.0 beta1
Organic Groups Project Organic Groups	Version 7.x-2.0 beta2
Organic Groups Project Organic Groups	Version 7.x-2.0 beta3
Organic Groups Project Organic Groups	Version 7.x-2.0 beta4
Organic Groups Project Organic Groups	Version 7.x-2.0 rc1
Organic Groups Project Organic Groups	Version 7.x-2.0 rc2
Organic Groups Project Organic Groups	Version 7.x-2.0 rc3
Organic Groups Project Organic Groups	Version 7.x-2.0 rc4
Organic Groups Project Organic Groups	Version 7.x-2.1
Organic Groups Project Organic Groups	Version 7.x-2.2
Organic Groups Project Organic Groups	Version 7.x-2.x dev