Vulnerabilities > Open Atrium Project > Open Atrium > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-02-01 CVE-2014-9503 Permissions, Privileges, and Access Controls vulnerability in Open Atrium Project Open Atrium
The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated users with "access content" permissions to modify arbitrary nodes by leveraging improper access checks on unspecified ajax callbacks.
network
low complexity
open-atrium-project CWE-264
6.5