CVE-2014-9503

MEDIUM 6.5CVE-2014-9503 · Published 01/02/2018 · updated 17/06/2026

In short

CVE-2014-9503 is a MEDIUM (CVSS 6.5) vulnerability affecting open atrium (open atrium project).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.6% of all vulnerabilities.
Fix: update to 7.x-2.26 or later.

Package	Affected versions	Patched versions
open atrium open_atrium_project	`= 7.x-2.0≥ 7.x-2.0, < 7.x-2.26`	`7.x-2.26`

Description

The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated users with "access content" permissions to modify arbitrary nodes by leveraging improper access checks on unspecified ajax callbacks.

References

openwall.com/lists/oss-security/2015/01/04/6 · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/99656 · Third Party Advisory
drupal.org/node/2394979 · Mitigation
drupal.org/node/2395045 · Patch

More vulnerabilities in open atrium

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free