Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:open_social:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductOpen Social (bfc57c00-9b88-5011-bd25-2e1aa2d0fb0c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-48921 vulnerable 2026-06-08 07:29:12.249329 Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13.
Published: 2025-06-26T13:32:44.948Z
Updated: 2025-06-26T17:46:14.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31686 vulnerable 2026-06-08 07:18:58.379730 Open Social - Less critical - Access bypass, Information Disclosure - SA-CONTRIB-2025-015
Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10.
Published: 2025-03-31T21:44:08.763Z
Updated: 2025-04-29T15:29:04.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31685 vulnerable 2026-06-08 07:18:58.378521 Open Social - Moderately critical - Access bypass - SA-CONTRIB-2025-014
Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10.
Published: 2025-03-31T21:43:27.662Z
Updated: 2025-04-29T15:31:06.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13312 vulnerable 2026-06-08 06:25:37.254135 Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076
Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9.
Published: 2025-01-09T20:28:53.431Z
Updated: 2025-01-31T15:50:36.016Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13274 vulnerable 2026-06-08 06:25:37.155966 Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038
Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5.
Published: 2025-01-09T19:27:04.989Z
Updated: 2025-01-14T17:08:25.046Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13273 vulnerable 2026-06-08 06:25:37.146462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13241 vulnerable 2026-06-08 06:25:37.050167 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13240 vulnerable 2026-06-08 06:25:37.048895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.