Filtered by vendor Open Atrium Project Subscriptions
Filtered by product Open Atrium Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2014-8736 1 Open Atrium Project 1 Open Atrium 2024-09-17 N/A
The Open Atrium Core module for Drupal before 7.x-2.22 allows remote attackers to bypass access restrictions and read file attachments that have been removed from a node by leveraging a previous revision of the node.
CVE-2014-9504 1 Open Atrium Project 1 Open Atrium 2024-08-06 N/A
The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remote attackers to access child groups via vectors related to membership inheritance.
CVE-2014-9502 1 Open Atrium Project 1 Open Atrium 2024-08-06 N/A
Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allow remote attackers to hijack the authentication of unknown victims via vectors related to menu callbacks.
CVE-2014-9503 1 Open Atrium Project 1 Open Atrium 2024-08-06 N/A
The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated users with "access content" permissions to modify arbitrary nodes by leveraging improper access checks on unspecified ajax callbacks.