CVE-2013-1907

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.91%

Published

Jul 16, 2013

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors.

Weaknesses (CWE)

CWE-264

Affected Products (5)

acquia · commonsvulnerable

acquia · commons_groupvulnerable

drupal · drupal

References (18)

http://osvdb.org/91748

http://packetstormsecurity.com/files/120991/Drupal-Common-Groups-7.x-Access-Bypass-Privilege-Escalation.html

http://seclists.org/fulldisclosure/2013/Mar/242

http://secunia.com/advisories/52769

Vendor Advisory

http://secunia.com/advisories/52795

Vendor Advisory

https://drupal.org/node/1954762

https://drupal.org/node/1954764

https://drupal.org/node/1954948

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/83133

http://osvdb.org/91748

http://packetstormsecurity.com/files/120991/Drupal-Common-Groups-7.x-Access-Bypass-Privilege-Escalation.html

http://seclists.org/fulldisclosure/2013/Mar/242

http://secunia.com/advisories/52769

Vendor Advisory

http://secunia.com/advisories/52795

Vendor Advisory

https://drupal.org/node/1954762

https://drupal.org/node/1954764

https://drupal.org/node/1954948

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/83133

KEV Catalog EPSS Scores Vendors All CVEs