OS
Product
Open Social
by Getopensocial · last CVE Jun 26, 2025
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 3Low 0
Watch

Add Open Social to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-31685
9.1
0%
Mar 31
Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10
Affected: before 12.3.11; 12.4.0 before 12.4.10
CVE-2024-13241
9.1
0%
Jan 9
Open Social - Moderately critical - Information Disclosure - SA-CONTRIB-2024-005
Affected: before 12.0.5
CVE-2025-48921
8.8
0%
Jun 26
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0…
Affected: before 12.3.14; 12.4.0 before 12.4.13
CVE-2025-31686
8.1
0%
Mar 31
Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10
Affected: before 12.3.11; 12.4.0 before 12.4.10
CVE-2024-13240
7.5
0%
Jan 9
Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004
Affected: 10.0.0 before 12.0.5
CVE-2024-13273
5.4
0%
Jan 9
Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037
Affected: before 12.3.8; 12.4.0 before 12.4.5; 13.0.0; 13.0.0; 13.0.0; 13.0.0; +6 more
CVE-2024-13312
5.3
0%
Jan 9
Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076
Affected: 11.8.0 before 12.3.10; 12.4.0 before 12.4.9
CVE-2024-13274
5.3
0%
Jan 9
Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038
Affected: before 12.3.8; 12.4.0 before 12.4.5
Showing 8