Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Drupal Open Social 12.3.8, 12.4.5 Clear all filters
TI-2024-12318 CVE-2024-13274 · GHSA-63wg-87qv-rw4r

Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038

Priority LOW 30

Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00377 Published 2025-01-09 Fixed in 12.3.8, 12.4.5 +1 CWE-799
TI-2024-12317 CVE-2024-13273 · GHSA-6q5c-9hq7-3fc3

Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00224 Published 2025-01-09 Fixed in 12.3.8, 12.4.5 CWE-79