CVE-2013-4228

Name of the Vulnerable Software and Affected Versions: Organic Groups (OG) module versions 7.x-2.x before 7.x-2.3 for Drupal

Description: The issue allows remote authenticated users to guess node IDs, subscribe to, and read the content of arbitrary private groups via unspecified vectors, due to the improper restriction of access to private groups.

Recommendations: For Organic Groups (OG) module versions 7.x-2.x before 7.x-2.3, update to version 7.x-2.3 or later to resolve the issue.