Approved changes feed: RSS · Atom

cpe:2.3:a:opensource-socialnetwork:open_source_social_network:8.6:*:*:*:*:*:*:*

part: a version: 8.6 update: *

VendorOpensource Socialnetwork (fccf6bd0-336f-5989-b9e5-9458184eb11f)
ProductOpen Source Social Network (6841d95e-7cce-5156-9799-ff7e358f45d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/opensource-socialnetwork/opensource-socialnetwork purl2cpe 2026-06-01 10:12:30.150997

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-63585 vulnerable 2026-06-08 07:39:17.666392 Details available
OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter.
Published: 2025-11-05T00:00:00.000Z
Updated: 2025-11-06T21:21:50.790Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-63441 vulnerable 2026-06-08 07:39:17.590658 Details available
Open Source Social Network (OSSN) 8.6 is vulnerable to Cross Site Scripting (XSS) via the parameter param` at endpoint u/administrator/friends.
Published: 2025-11-03T00:00:00.000Z
Updated: 2025-11-03T18:14:49.817Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.