Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: Getopensocial Clear all filters
TI-2025-22829 CVE-2025-31685 · GHSA-gf72-h4cp-wcm4

Open Social - Moderately critical - Access bypass - SA-CONTRIB-2025-014

Priority MEDIUM 45

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00393 Published 2025-03-31 Fixed in 12.3.11, 12.4.10 CWE-862
TI-2024-12356 CVE-2024-13312 · GHSA-p3gg-w5rj-m5rv

Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076

Priority LOW 30

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00311 Published 2025-01-09 Fixed in 12.3.10, 12.4.9 CWE-862
TI-2024-12318 CVE-2024-13274 · GHSA-63wg-87qv-rw4r

Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038

Priority LOW 30

Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00377 Published 2025-01-09 Fixed in 12.3.8, 12.4.5 +1 CWE-799
TI-2024-12317 CVE-2024-13273 · GHSA-6q5c-9hq7-3fc3

Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00224 Published 2025-01-09 Fixed in 12.3.8, 12.4.5 CWE-79
TI-2024-12284 CVE-2024-13240 · GHSA-h8j9-776h-g7wr

Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004

Priority LOW 39

Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00381 Published 2025-01-09 Fixed in 12.05 CWE-284