Advisories · Technology

Drupal Open Social.

Every CVE that names Drupal Open Social among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-48921 CVE record

CVSS 8.8 High

Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079
- Drupal Open Social
- Cross-site request forgery (CSRF)
Not analysed yet 26 Jun 2025
CVE-2024-13312 CVE record

CVSS 5.3 Medium

Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076
- Drupal Open Social
- Broken access control
Not analysed yet 9 Jan 2025
CVE-2024-13273 CVE record

CVSS 5.4 Medium

Open Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037
- Drupal Open Social
- Cross-site scripting (XSS)
Not analysed yet 9 Jan 2025
CVE-2024-13241 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Open Social - Moderately critical - Information Disclosure - SA-CONTRIB-2024-005
- Drupal Open Social
- Broken access control
Not analysed yet 9 Jan 2025
CVE-2024-13240 CVE record

CVSS 7.5 High

Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004
- Drupal Open Social
- Broken access control
Not analysed yet 9 Jan 2025