Unscored severity · published Nov 9, 2009
CVE-2009-3921
The Smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does not verify group-node privileges in certain circumstances involving subqueue…
–
CVSS
1.2%
EPSS
No
On KEV
Description
The Smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for Drupal, does not verify group-node privileges in certain circumstances involving subqueue creation, which allows remote authenticated users to discover arbitrary organic group names by reading confirmation messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SO
Smartqueue OG · Ezra Barnett Gildesgame
5.x-1.0; 5.x-1.1; 5.x-1.2; 5.x-1.x-dev; 6.x-1.0; 6.x-1.0; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3921
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3921
Patch
http://drupal.org/node/617496
Patch
http://drupal.org/node/617500
Patch
http://drupal.org/node/623554
osvdb.org
http://osvdb.org/59675
Vendor Advisory
http://secunia.com/advisories/37288
Patch
http://www.securityfocus.com/bid/36925