CVE-2009-4528 The Organic Groups (OG) Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via....
MediumCVSS 6.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Organic Groups (OG) Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moshe weitzman og vocab | = 6.x-1.0-rc1 | No fix listed |
| moshe weitzman og vocab | = 6.x-1.x-dev | No fix listed |
References
- drupal.org patch
- drupal.org patch vendor-advisory
- 58947 vdb-entry
- 37060 third-party-advisory vendor-advisory
- 36685 vdb-entry
- ADV-2009-2920 vdb-entry vendor-advisory
- ogvocab-membership-security-bypass(53780) vdb-entry