The Organic Groups (OG) module 6.x-2.x before 6.x-2.3 for Drupal does not properly restrict access, which allows remote attackers to obtain sensitive information such as private group titles via a request through the Views module.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Organic_groups | Moshe_weitzman | 6.x-2.0 | 6.x-2.0 |
Organic_groups | Moshe_weitzman | 6.x-2.0 | 6.x-2.0 |
Organic_groups | Moshe_weitzman | 6.x-2.0 | 6.x-2.0 |
Organic_groups | Moshe_weitzman | 6.x-2.0 | 6.x-2.0 |
Organic_groups | Moshe_weitzman | 6.x-2.1 | 6.x-2.1 |
Organic_groups | Moshe_weitzman | 6.x-2.2 | 6.x-2.2 |
Organic_groups | Moshe_weitzman | 6.x-2.x | 6.x-2.x |