CVE-2024-13241: Open Social - Moderately critical - Information Disclosure - SA-CONTRIB-2024-005
Published Jan 9, 2025
·Updated
Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5.
Affected Software
2 affected components
Drupal Open Social>12.0.5
Getopensocial Open Social Drupal<12.0.5
Event History
Jan 9, 2025
CVE Published
via MITRE·06:47 PM
Data Sourced
via MITRE·06:47 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-13241?
CVE-2024-13241 has been classified as a critical severity vulnerability affecting Drupal Open Social.
2
How do I fix CVE-2024-13241?
To fix CVE-2024-13241, upgrade Drupal Open Social to version 12.0.5 or later.
3
What issue does CVE-2024-13241 describe?
CVE-2024-13241 describes an improper authorization vulnerability that allows data collection from common resource locations.
4
Which versions of Drupal Open Social are affected by CVE-2024-13241?
CVE-2024-13241 affects Drupal Open Social versions prior to 12.0.5.
5
How can I determine if my site is vulnerable to CVE-2024-13241?
You can determine if your site is vulnerable to CVE-2024-13241 by checking the version of Drupal Open Social you are using.