CVE-2013-4228
First published: Tue Feb 18 2020(Updated: )
The OG access fields (visibility fields) implementation in Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal does not properly restrict access to private groups, which allows remote authenticated users to guess node IDs, subscribe to, and read the content of arbitrary private groups via unspecified vectors.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Organic Groups Project Organic Groups | =7.x-2.0 | |
| Organic Groups Project Organic Groups | =7.x-2.0-alpha1 | |
| Organic Groups Project Organic Groups | =7.x-2.0-alpha2 | |
| Organic Groups Project Organic Groups | =7.x-2.0-alpha3 | |
| Organic Groups Project Organic Groups | =7.x-2.0-beta1 | |
| Organic Groups Project Organic Groups | =7.x-2.0-beta2 | |
| Organic Groups Project Organic Groups | =7.x-2.0-beta3 | |
| Organic Groups Project Organic Groups | =7.x-2.0-beta4 | |
| Organic Groups Project Organic Groups | =7.x-2.0-rc1 | |
| Organic Groups Project Organic Groups | =7.x-2.0-rc2 | |
| Organic Groups Project Organic Groups | =7.x-2.0-rc3 | |
| Organic Groups Project Organic Groups | =7.x-2.0-rc4 | |
| Organic Groups Project Organic Groups | =7.x-2.1 | |
| Organic Groups Project Organic Groups | =7.x-2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/first-publish-date
- agent/event
- agent/tags
- agent/description
- agent/source
- vendor/organic groups project
- canonical/organic groups project organic groups
- version/organic groups project organic groups/7.x-2.0
- version/organic groups project organic groups/7.x-2.0-alpha1
- version/organic groups project organic groups/7.x-2.0-alpha2
- version/organic groups project organic groups/7.x-2.0-alpha3
- version/organic groups project organic groups/7.x-2.0-beta1
- version/organic groups project organic groups/7.x-2.0-beta2
- version/organic groups project organic groups/7.x-2.0-beta3
- version/organic groups project organic groups/7.x-2.0-beta4
- version/organic groups project organic groups/7.x-2.0-rc1
- version/organic groups project organic groups/7.x-2.0-rc2
- version/organic groups project organic groups/7.x-2.0-rc3
- version/organic groups project organic groups/7.x-2.0-rc4
- version/organic groups project organic groups/7.x-2.1
- version/organic groups project organic groups/7.x-2.2