CVE-2024-13240: Open Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004
Published Jan 9, 2025
·Updated
Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05.
Affected Software
2 affected components
Drupal Open Social>0.0.0, <12.05
Getopensocial Open Social Drupal>=10.0.0<12.0.5
Event History
Jan 9, 2025
CVE Published
via MITRE·06:46 PM
Data Sourced
via MITRE·06:46 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-13240?
CVE-2024-13240 is classified as a high severity vulnerability due to its potential for improper access control.
2
How do I fix CVE-2024-13240?
To fix CVE-2024-13240, upgrade your Drupal Open Social installation to version 12.05 or later.
3
What software is affected by CVE-2024-13240?
CVE-2024-13240 affects Drupal Open Social versions from 0.0.0 up to, but not including, 12.05.
4
What type of vulnerability is CVE-2024-13240?
CVE-2024-13240 is an improper access control vulnerability.
5
What can happen if CVE-2024-13240 is exploited?
Exploitation of CVE-2024-13240 may allow an attacker to collect data from common resource locations.