CVE-2013-4498
Low
Description
The Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly delete organic group group spaces content when using the option to move to a new group, which causes the content to be "orphaned" and allows remote authenticated users with the "access content" permission to obtain sensitive information via vectors involving a rebuild access for the site or content.
SeverityLow
CVSS2.1
Exploit probability—
ProductFlorian Weber Spaces
PublishedMay 17, 2014
First seenMay 17, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| florian_weber spaces | 6.x-3.0, 6.x-3.1, 6.x-3.2, 6.x-3.3, 6.x-3.4, 6.x-3.5, 6.x-3.6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.