OS
Product
Open Social
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 3Low 0
Watch
Add Open Social to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-31685 | 9.1 | Mar 31 | Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10 Affected: before 12.3.11; 12.4.0 before 12.4.10 |
| CVE-2024-13241 | 9.1 | Jan 9 | Open Social - Moderately critical - Information Disclosure - SA-CONTRIB-2024-005 Affected: before 12.0.5 |
| CVE-2025-48921 | 8.8 | Jun 26 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0… Affected: before 12.3.14; 12.4.0 before 12.4.13 |
| CVE-2025-31686 | 8.1 | Mar 31 | Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10 Affected: before 12.3.11; 12.4.0 before 12.4.10 |
| CVE-2024-13240 | 7.5 | Jan 9 | Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004 Affected: 10.0.0 before 12.0.5 |
| CVE-2024-13273 | 5.4 | Jan 9 | Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037 Affected: before 12.3.8; 12.4.0 before 12.4.5; 13.0.0; 13.0.0; 13.0.0; 13.0.0; +6 more |
| CVE-2024-13312 | 5.3 | Jan 9 | Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076 Affected: 11.8.0 before 12.3.10; 12.4.0 before 12.4.9 |
| CVE-2024-13274 | 5.3 | Jan 9 | Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038 Affected: before 12.3.8; 12.4.0 before 12.4.5 |
Showing 8
