| Package | Affected versions | Patched versions |
|---|---|---|
| open atrium | = 7.x-2.0≥ 7.x-2.0, < 7.x-2.26 | 7.x-2.26 |
The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated users with "access content" permissions to modify arbitrary nodes by leveraging improper access checks on unspecified ajax callbacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free