The Organic Groups (OG) module 7.x-2.x prior to 7.x-2.3 for Drupal allows remote malicious users to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the og_group_ref field.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
organic groups project organic groups 7.x-2.0 |
||
organic groups project organic groups 7.x-2.1 |
||
organic groups project organic groups 7.x-2.2 |
||
organic groups project organic groups 7.x-2.x |
Vulmon