本ページは getopensocial open_social に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2025-48921 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13. | [email protected] | 8.8 | 0.16% | 2025-06-26 | 2026-06-17 |
| CVE-2025-31686 | Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10. | [email protected] | 8.1 | 0.36% | 2025-03-31 | 2026-06-17 |
| CVE-2025-31685 | Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10. | [email protected] | 9.1 | 0.36% | 2025-03-31 | 2026-06-17 |
| CVE-2024-13312 | Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9. | [email protected] | 5.3 | 0.29% | 2025-01-09 | 2026-06-17 |
| CVE-2024-13274 | Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5. | [email protected] | 5.3 | 0.35% | 2025-01-09 | 2026-06-17 |
| CVE-2024-13273 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11. | [email protected] | 5.4 | 0.15% | 2025-01-09 | 2026-06-17 |
| CVE-2024-13241 | Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5. | [email protected] | 9.1 | 0.34% | 2025-01-09 | 2026-06-17 |
| CVE-2024-13240 | Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05. | [email protected] | 7.5 | 0.45% | 2025-01-09 | 2026-06-17 |