VULNERABILITY INTELLIGENCE

CVE-2013-7065

CVSS score5.8 NONE
EPSS probability1.22%
CISA KEVNot currently listed
Published2014-04-29
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N

Description

The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the og_group_ref field.

Weakness classification

  • nvd@nist.gov: CWE-264

Primary references