CVE-2013-7068 : The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users to bypass group restr

The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users to bypass group restrictions on nodes with all groups set to optional input via an empty group field.

Published 2014-04-29 14:38:44

Updated 2014-04-29 17:52:47

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2013-7068

EPSS FAQ

0.14%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 49 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-7068

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.9	MEDIUM	AV:N/AC:M/Au:S/C:P/I:P/A:N	6.8	4.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: Single Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: None

References for CVE-2013-7068

Products affected by CVE-2013-7068

Organic Groups Project » Organic Groups » Version: 7.x-2.0 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:-:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.0 Update Alpha1 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:alpha1:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.0 Update Alpha2 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:alpha2:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.0 Update Alpha3 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:alpha3:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.0 Update Beta1 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:beta1:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.0 Update Beta2 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:beta2:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.0 Update Beta3 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:beta3:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.0 Update Beta4 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:beta4:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.0 Update RC1 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:rc1:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.0 Update RC2 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:rc2:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.0 Update RC3 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:rc3:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.0 Update RC4 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.0:rc4:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.1 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.1:*:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.2 For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.2:*:*:*:*:drupal:*:*
Matching versions
Organic Groups Project » Organic Groups » Version: 7.x-2.x Update DEV For Drupal
cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.x:dev:*:*:*:drupal:*:*
Matching versions

Vulnerability Details : CVE-2013-7068

Exploit prediction scoring system (EPSS) score for CVE-2013-7068

CVSS scores for CVE-2013-7068

CWE ids for CVE-2013-7068

References for CVE-2013-7068

Products affected by CVE-2013-7068