Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Priority LOW 28

The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspeci…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02558 Published 2013-07-16 No fix listed CWE-264
Priority LOW 28

The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspeci…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02908 Published 2013-07-16 No fix listed CWE-264
Priority LOW 26

The commons_discussion_views_default_views function in modules/features/commons_discussion/commons_discussion.views_default.inc in the Drupal Commons module 6.x-2.x before 6.x-2.8 for Drupal does not properly enforce int…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01369 Published 2012-10-31 No fix listed CWE-264