CVE-2014-8734 The Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote authenticated users with the "access administration pages" permission to change module settings via unspecified vec...
LowCVSS 3.5
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote authenticated users with the "access administration pages" permission to change module settings via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal organic groups menu | <= 7.x-2.1 | No fix listed |
| drupal organic groups menu | = 7.x-2.0 | No fix listed |
| drupal organic groups menu | = 7.x-2.x-dev | No fix listed |
References
- drupal-ogmenu-access-bypass(98445) vdb-entry
- www.drupal.org patch
- www.drupal.org patch vendor-advisory