CVEvulnerability

CVE-2012-5539

3.5 LOW Published 2012-12-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-12-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
Weaknesses
CWE-264

Description

The Organic Groups (OG) module 7.x-1.x before 7.x-1.5 for Drupal does not properly maintain pending group memberships, which allows remote authenticated users to post to arbitrary groups by modifying their own account while a pending membership is waiting to be approved.

Affected configurations

• organic groups project organic groups 7.x-1.0 • organic groups project organic groups 7.x-1.1 • organic groups project organic groups 7.x-1.2 • organic groups project organic groups 7.x-1.3 • organic groups project organic groups 7.x-1.4 • organic groups project organic groups 7.x-1.x

Related

Weakness · not in database (1)

References