RSS   Podatności dla 'Open atrium'   RSS

2018-02-01
 
CVE-2014-9504

CWE-284
 

 
The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remote attackers to access child groups via vectors related to membership inheritance.

 
 
CVE-2014-9503

CWE-264
 

 
The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated users with "access content" permissions to modify arbitrary nodes by leveraging improper access checks on unspecified ajax callbacks.

 
 
CVE-2014-9502

CWE-352
 

 
Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allow remote attackers to hijack the authentication of unknown victims via vectors related to menu callbacks.

 
2014-11-12
 
CVE-2014-8736

 

 
The Open Atrium Core module for Drupal before 7.x-2.22 allows remote attackers to bypass access restrictions and read file attachments that have been removed from a node by leveraging a previous revision of the node.

 


Copyright 2024, cxsecurity.com

 

Back to Top