Open Social vulnerabilities

5 known vulnerabilities in Open Social from Drupal. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Open Social: Cross-Site Request Forgery

  CVE-2025-48921Jun 26, 2025Drupal

  Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13.

• 8.1 High severity

  Open Social: Missing Authorization

  CVE-2025-31686Mar 31, 2025Drupal

  Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10.

• 9.1 Critical severity

  Open Social: Missing Authorization

  CVE-2025-31685Mar 31, 2025Drupal

  Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10.

• 9.1 Critical severity

  Open Social: Improper Authorization

  CVE-2024-13241Jan 9, 2025Drupal

  Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5.

• 7.5 High severity

  Open Social: Improper Access Control

  CVE-2024-13240Jan 9, 2025Drupal

  Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05.