PT-2020-7487
CVE-2013-4228
·
تاريخ النشر
2020-02-18
·
تاريخ التحديث
2020-02-26
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Organic Groups (OG) module versions 7.x-2.x before 7.x-2.3 for Drupal
Description:
The issue allows remote authenticated users to guess node IDs, subscribe to, and read the content of arbitrary private groups via unspecified vectors, due to the improper restriction of access to private groups.
Recommendations:
For Organic Groups (OG) module versions 7.x-2.x before 7.x-2.3, update to version 7.x-2.3 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾