CVE-2025-48921: Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079
Published Jun 26, 2025
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13.
Affected Software
3 affected components
Drupal Open Social>0.0.0, <12.3.14, >12.4.0, <12.4.13
Getopensocial Open Social Drupal<12.3.14
Getopensocial Open Social Drupal>=12.4.0<12.4.13
Event History
Jun 26, 2025
CVE Published
via MITRE·01:32 PM
Data Sourced
via MITRE·01:32 PM
DescriptionWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-48921?
CVE-2025-48921 is classified as a moderate severity vulnerability due to its potential for exploitation through Cross-Site Request Forgery.
2
How do I fix CVE-2025-48921?
To fix CVE-2025-48921, update your Drupal Open Social installation to version 12.4.13 or install any later version.
3
What versions of Drupal Open Social are affected by CVE-2025-48921?
CVE-2025-48921 affects Drupal Open Social versions before 12.3.14 and from 12.4.0 up to 12.4.13.
4
What type of vulnerability is CVE-2025-48921?
CVE-2025-48921 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
Who is impacted by CVE-2025-48921?
Any user of affected versions of Drupal Open Social is potentially at risk from CVE-2025-48921.