QwikSec

Security Database

CVE

CWE

Training

CVE-2012-5539

Published: Dec 3, 2012

Modified: Sep 16, 2024

PUBLISHED

Description

The Organic Groups (OG) module 7.x-1.x before 7.x-1.5 for Drupal does not properly maintain pending group memberships, which allows remote authenticated users to post to arbitrary groups by modifying their own account while a pending membership is waiting to be approved.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://drupal.org/node/1795906

x_refsource_CONFIRM

[oss-security] 20121120 Re: CVE Request for Drupal Contributed Modules

mailing-list

x_refsource_MLIST

http://drupal.org/node/1796036

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.