What is the severity of CVE-2012-5539?

CVE-2012-5539 has a high severity rating as it allows remote authenticated users to post to any arbitrary group.

How do I fix CVE-2012-5539?

To fix CVE-2012-5539, update the Organic Groups module to version 7.x-1.5 or later.

Which versions of the Organic Groups module are affected by CVE-2012-5539?

The affected versions of the Organic Groups module are versions 7.x-1.0 through 7.x-1.4.

What is the impact of exploiting CVE-2012-5539?

Exploiting CVE-2012-5539 allows users with pending group memberships to post content to arbitrary groups before their membership is approved.

Is there a workaround for CVE-2012-5539 if I cannot update immediately?

A potential workaround for CVE-2012-5539 is to disable the Organic Groups module until an update can be applied.

Vulnerability/
CVE-2012-5539

low

3.5

CWE

264

3/12/2012

16/9/2024

CVE-2012-5539

First published: Mon Dec 03 2012(Updated: )

The Organic Groups (OG) module 7.x-1.x before 7.x-1.5 for Drupal does not properly maintain pending group memberships, which allows remote authenticated users to post to arbitrary groups by modifying their own account while a pending membership is waiting to be approved.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
Organic Groups Project Organic Groups	=7.x-1.0
Organic Groups Project Organic Groups	=7.x-1.0-alpha1
Organic Groups Project Organic Groups	=7.x-1.1
Organic Groups Project Organic Groups	=7.x-1.1-rc1
Organic Groups Project Organic Groups	=7.x-1.1-rc2
Organic Groups Project Organic Groups	=7.x-1.1-rc3
Organic Groups Project Organic Groups	=7.x-1.1-rc4
Organic Groups Project Organic Groups	=7.x-1.2
Organic Groups Project Organic Groups	=7.x-1.3
Organic Groups Project Organic Groups	=7.x-1.4
Organic Groups Project Organic Groups	=7.x-1.x-dev
Drupal Drupal

Remedy

http://drupal.org/node/1795906

Remedy

http://drupal.org/node/1796036

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2012-5539?
CVE-2012-5539 has a high severity rating as it allows remote authenticated users to post to any arbitrary group.
How do I fix CVE-2012-5539?
To fix CVE-2012-5539, update the Organic Groups module to version 7.x-1.5 or later.
Which versions of the Organic Groups module are affected by CVE-2012-5539?
The affected versions of the Organic Groups module are versions 7.x-1.0 through 7.x-1.4.
What is the impact of exploiting CVE-2012-5539?
Exploiting CVE-2012-5539 allows users with pending group memberships to post content to arbitrary groups before their membership is approved.
Is there a workaround for CVE-2012-5539 if I cannot update immediately?
A potential workaround for CVE-2012-5539 is to disable the Organic Groups module until an update can be applied.

collector/nvd-index
agent/type
agent/softwarecombine
agent/remedy
agent/references
agent/weakness
agent/author
agent/severity
agent/description
agent/tags
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
agent/first-publish-date
agent/source
vendor/organic groups project
canonical/organic groups project organic groups
version/organic groups project organic groups/7.x-1.0
version/organic groups project organic groups/7.x-1.0-alpha1
version/organic groups project organic groups/7.x-1.1
version/organic groups project organic groups/7.x-1.1-rc1
version/organic groups project organic groups/7.x-1.1-rc2
version/organic groups project organic groups/7.x-1.1-rc3
version/organic groups project organic groups/7.x-1.1-rc4
version/organic groups project organic groups/7.x-1.2
version/organic groups project organic groups/7.x-1.3
version/organic groups project organic groups/7.x-1.4
version/organic groups project organic groups/7.x-1.x-dev
vendor/drupal
canonical/drupal drupal

Frequently Asked Questions

What is the severity of CVE-2012-5539?
CVE-2012-5539 has a high severity rating as it allows remote authenticated users to post to any arbitrary group.
How do I fix CVE-2012-5539?
To fix CVE-2012-5539, update the Organic Groups module to version 7.x-1.5 or later.
Which versions of the Organic Groups module are affected by CVE-2012-5539?
The affected versions of the Organic Groups module are versions 7.x-1.0 through 7.x-1.4.
What is the impact of exploiting CVE-2012-5539?
Exploiting CVE-2012-5539 allows users with pending group memberships to post content to arbitrary groups before their membership is approved.
Is there a workaround for CVE-2012-5539 if I cannot update immediately?
A potential workaround for CVE-2012-5539 is to disable the Organic Groups module until an update can be applied.

CVE-2012-5539

Remedy

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2012-5539?

How do I fix CVE-2012-5539?

Which versions of the Organic Groups module are affected by CVE-2012-5539?

What is the impact of exploiting CVE-2012-5539?

Is there a workaround for CVE-2012-5539 if I cannot update immediately?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2012-5539?

How do I fix CVE-2012-5539?

Which versions of the Organic Groups module are affected by CVE-2012-5539?

What is the impact of exploiting CVE-2012-5539?

Is there a workaround for CVE-2012-5539 if I cannot update immediately?