Filtered by vendor Open Atrium Project
Subscriptions
Filtered by product Open Atrium
Subscriptions
Total
4 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2014-8736 | 1 Open Atrium Project | 1 Open Atrium | 2025-04-12 | N/A |
| The Open Atrium Core module for Drupal before 7.x-2.22 allows remote attackers to bypass access restrictions and read file attachments that have been removed from a node by leveraging a previous revision of the node. | ||||
| CVE-2014-9504 | 1 Open Atrium Project | 1 Open Atrium | 2024-11-21 | N/A |
| The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remote attackers to access child groups via vectors related to membership inheritance. | ||||
| CVE-2014-9503 | 1 Open Atrium Project | 1 Open Atrium | 2024-11-21 | N/A |
| The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated users with "access content" permissions to modify arbitrary nodes by leveraging improper access checks on unspecified ajax callbacks. | ||||
| CVE-2014-9502 | 1 Open Atrium Project | 1 Open Atrium | 2024-11-21 | N/A |
| Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allow remote attackers to hijack the authentication of unknown victims via vectors related to menu callbacks. | ||||
Page 1 of 1.