Unrated severityNVD Advisory· Published Jul 16, 2013· Updated Jun 16, 2026
CVE-2013-1908
CVE-2013-1908
Description
The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content to groups via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:commons_wikis_project:commons_wikis:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:commons_wikis_project:commons_wikis:*:*:*:*:*:*:*:*range: <=7.x-3.0
- cpe:2.3:a:commons_wikis_project:commons_wikis:7.x-3.x:dev:*:*:*:*:*:*
- Range: < 7.x-3.1
Patches
Vulnerability mechanics
References
8- drupal.org/node/1954766nvdPatchVendor Advisory
- drupal.org/node/1954768nvdPatch
- drupal.org/node/1954948nvdPatch
- secunia.com/advisories/52766nvdVendor Advisory
- secunia.com/advisories/52795nvdVendor Advisory
- osvdb.org/91747nvd
- packetstormsecurity.com/files/120995/Drupal-Common-Wikis-7.x-Access-Bypass-Privilege-Escalation.htmlnvd
- seclists.org/fulldisclosure/2013/Mar/244nvd
News mentions
0No linked articles in our index yet.