The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| groups_communities_and_co_project / gcc | 7.x-1.0-alpha4 | 7.x-1.0-alpha4.x |
| groups_communities_and_co_project / gcc | 7.x-1.0-alpha3 | 7.x-1.0-alpha3.x |
| groups_communities_and_co_project / gcc | 7.x-1.0-alpha1 | 7.x-1.0-alpha1.x |
| groups_communities_and_co_project / gcc | 7.x-1.x-dev | 7.x-1.x-dev.x |
| groups_communities_and_co_project / gcc | 7.x-1.1-beta1 | 7.x-1.1-beta1.x |
| groups_communities_and_co_project / gcc | 7.x-1.0-alpha2 | 7.x-1.0-alpha2.x |
| groups_communities_and_co_project / gcc | 7.x-1.0-beta2 | 7.x-1.0-beta2.x |
| groups_communities_and_co_project / gcc | 7.x-1.0 | 7.x-1.0.x |