VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 16, 2013· Updated Jun 16, 2026

CVE-2013-1907

CVE-2013-1907

Description

The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Mautic/Commons3 versions
    cpe:2.3:a:acquia:commons:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:acquia:commons:*:*:*:*:*:*:*:*range: <=7.x-3.0
    • cpe:2.3:a:acquia:commons:7.x-3.x:dev:*:*:*:*:*:*
    • cpe:2.3:a:acquia:commons:_group7.x-3.x:dev:*:*:*:*:*:*
  • Mautic/Commons Group
    cpe:2.3:a:acquia:commons_group:*:*:*:*:*:*:*:*
    Range: <=7.x-3.0
  • Drupal/Commons Groupllm-create
    Range: <7.x-3.1

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.