CVE-2008-3094 The Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attackers to obtain sensitive information (private group names) via unspecified vectors...
MediumCVSS 4.3
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attackers to obtain sensitive information (private group names) via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| organic groups project organic groups | = 5.x-5.x-7.2 | No fix listed |
| organic groups project organic groups | = 5.x-7.0 | No fix listed |
| organic groups project organic groups | = 5.x-7.0-rc1 | No fix listed |
| organic groups project organic groups | = 5.x-7.0-rc2 | No fix listed |
| organic groups project organic groups | = 5.x-7.0-rc3 | No fix listed |
| organic groups project organic groups | = 5.x-7.0-rc4 | No fix listed |
| organic groups project organic groups | = 5.x-7.0-rc5 | No fix listed |
| organic groups project organic groups | = 5.x-7.1 | No fix listed |
| organic groups project organic groups | = 6.x-1.0-alpha | No fix listed |
| organic groups project organic groups | = 6.x-1.0-beta | No fix listed |
| organic groups project organic groups | = 6.x-1.x-dev | No fix listed |
References
- drupal.org patch vendor-advisory
- 30928 third-party-advisory
- 30070 third-party-advisory vdb-entry
- organic-title-information-disclosure(43578) third-party-advisory vdb-entry