The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Commons | Acquia | * | 7.x-3.0 (including) |
| Commons | Acquia | 7.x-3.x-dev (including) | 7.x-3.x-dev (including) |
| Commons_wikis | Commons_wikis_project | * | 7.x-3.0 (including) |
| Commons_wikis | Commons_wikis_project | 7.x-3.x-dev (including) | 7.x-3.x-dev (including) |