GCVE - cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.x:dev:*:*:*:drupal:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:organic_groups_project:organic_groups:7.x-2.x:dev:*:*:*:drupal:*:*

part: a version: 7.x-2.x update: dev

Vendor	Organic Groups Project (`7d1be14f-5ced-5b66-8ed2-f28bb2df63ff`)
Product	Organic Groups (`6cb70031-c9c3-5e1d-ab8d-0bc75791137d`)
Edition	*
Language	*
Software edition	*
Target software	drupal
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/drupalprojects/og`	purl2cpe	2026-06-01 10:18:22.704926

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-7068`	vulnerable	2026-06-08 05:05:08.227168	Details available The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users to bypass group restrictions on nodes with all groups set to optional input via an empty group field. Published: 2014-04-29T14:00:00.000Z Updated: 2024-08-06T17:53:46.077Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/12/12/1 https://drupal.org/node/2140217 https://drupal.org/node/2140209 http://www.openwall.com/lists/oss-security/2013/12/06/7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-7065`	vulnerable	2026-06-08 05:05:08.212451	Details available The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to bypass access restrictions and post to arbitrary groups via a group audience field, as demonstrated by the og_group_ref field. Published: 2014-04-29T14:00:00.000Z Updated: 2024-08-06T17:53:46.030Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/12/12/1 https://drupal.org/node/2140217 https://drupal.org/node/2140209 http://www.openwall.com/lists/oss-security/2013/12/06/7	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.