Read the docs

Getopensocial

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Getopensocial records in CISA KEV

No Getopensocial vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Open Social 8 records MEDIUM

Records

8 records in Open Social · all components

TI-2025-22829 CVE-2025-31685 · GHSA-gf72-h4cp-wcm4

Open Social - Moderately critical - Access bypass - SA-CONTRIB-2025-014

Priority MEDIUM 45

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00393 Published 2025-03-31 Fixed in 12.3.11, 12.4.10 CWE-862
TI-2024-12284 CVE-2024-13240 · GHSA-h8j9-776h-g7wr

Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004

Priority LOW 39

Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00381 Published 2025-01-09 Fixed in 12.05 CWE-284
TI-2024-12356 CVE-2024-13312 · GHSA-p3gg-w5rj-m5rv

Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076

Priority LOW 30

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00311 Published 2025-01-09 Fixed in 12.3.10, 12.4.9 CWE-862
TI-2024-12318 CVE-2024-13274 · GHSA-63wg-87qv-rw4r

Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038

Priority LOW 30

Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00377 Published 2025-01-09 Fixed in 12.3.8, 12.4.5 +1 CWE-799
TI-2024-12317 CVE-2024-13273 · GHSA-6q5c-9hq7-3fc3

Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00224 Published 2025-01-09 Fixed in 12.3.8, 12.4.5 CWE-79
Open these records in search →