Drupal Organic Groups SA-CONTRIB-2012-148 Security Bypass Vulnerability
18 Dec. 2012
Summary
The Organic Groups module for Drupal is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization.
Credit:
The information has been provided by John Takousis.
Vulnerable Systems:
* Drupal Organic groups 7.x-1.x versions prior to 7.x-1.5
Attackers can exploit this issue to bypass security restrictions to obtain sensitive information or perform unauthorized actions; this may aid in launching further attacks.
Disclosure Timeline:
Published:September 26 2012
Updated: November 23 2012
