CVE-2012-5539

2022-10-0316:15:32

redhat

www.cve.org

organic groups

drupal

7.x-1.x

remote authenticated users

pending membership

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.3%

JSON

The Organic Groups (OG) module 7.x-1.x before 7.x-1.5 for Drupal does not properly maintain pending group memberships, which allows remote authenticated users to post to arbitrary groups by modifying their own account while a pending membership is waiting to be approved.