The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Commons | Acquia | * | 7.x-3.0 |
Commons | Acquia | _group7.x-3.x | _group7.x-3.x |
Commons | Acquia | 7.x-3.x | 7.x-3.x |
Commons_group | Acquia | * | 7.x-3.0 |