CVE-2009-3921

The Smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does not verify group-node privileges in certain circumstances…

published November 9, 2009

CVSS
—
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

The Smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does not verify group-node privileges in certain circumstances involving subqueue creation, which allows remote authenticated users to discover arbitrary organic group names by reading confirmation messages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01152 · 66.7th percentile
Published
2009-11-09T17:00Z
EPSS history
Timeline
  • 09 NOV 17:00Z
    The Smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does not verify group-node privileges in certain circumstances…
    cvelistv5