CVE-2008-3094

Organic Groups < 5.x-7.3 and < 6.x-1.0-RC1 - Unauthorized Sensitive Information Exposure

Title source: llm

Description

The Organic Groups (OG) module 5.x before 5.x-7.3 and 6.x before 6.x-1.0-RC1, a module for Drupal, allows remote attackers to obtain sensitive information (private group names) via unspecified vectors.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/30070

Patch, Vendor Advisory x_refsource_confirm

http://drupal.org/node/277873

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30928

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/43578

Scores

EPSS 0.0204

EPSS Percentile 78.9%

Details

CWE

CWE-200

Status published

Products (5)

organic_groups_project/organic_groups 5.x-5.x-7.2

organic_groups_project/organic_groups 5.x-7.0 (6 CPE variants)

organic_groups_project/organic_groups 5.x-7.1

organic_groups_project/organic_groups 6.x-1.0 alpha (2 CPE variants)

organic_groups_project/organic_groups 6.x-1.x dev

Published Jul 09, 2008

Tracked Since Feb 18, 2026