This page lists publicly disclosed CVE vulnerabilities affecting getopensocial open_social (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-48921 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13. | [email protected] | 8.8 | 0.16% | 2025-06-26 | 2026-06-17 |
| CVE-2025-31686 | Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10. | [email protected] | 8.1 | 0.33% | 2025-03-31 | 2026-06-17 |
| CVE-2025-31685 | Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10. | [email protected] | 9.1 | 0.31% | 2025-03-31 | 2026-06-17 |
| CVE-2024-13312 | Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9. | [email protected] | 5.3 | 0.29% | 2025-01-09 | 2026-06-17 |
| CVE-2024-13274 | Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5. | [email protected] | 5.3 | 0.35% | 2025-01-09 | 2026-06-17 |
| CVE-2024-13273 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11. | [email protected] | 5.4 | 0.15% | 2025-01-09 | 2026-06-17 |
| CVE-2024-13241 | Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5. | [email protected] | 9.1 | 0.34% | 2025-01-09 | 2026-06-17 |
| CVE-2024-13240 | Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05. | [email protected] | 7.5 | 0.45% | 2025-01-09 | 2026-06-17 |