Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how getopensocial compares to other vendors in security performance

View Risk Score →

Drupal Open SocialOpen Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079

Risk 77
Severity
8.8
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13.

First published (updated )
CVE-2025-48921

Drupal Open SocialDrupal Open Social Missing Authorization vulnerability

Risk 54
Severity
8.1
EPSS
0.02%
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Drupal Open Social Missing Authorization vulnerability

1 / 3
Source: Packagist
First published (updated )
CVE-2025-31686

Drupal Open SocialDrupal Open Social Missing Authorization vulnerability

Risk 47
Severity
9.1
EPSS
0.02%
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Drupal Open Social Missing Authorization vulnerability

1 / 3
Source: Packagist
First published (updated )
CVE-2025-31685

Drupal Open SocialOpen Social - Moderately critical - Access bypass - SA-CONTRIB-2024-076

Risk 27
Severity
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9.

First published (updated )
CVE-2024-13312

composer/goalgorilla/open_socialDrupal Open Social allows Functionality Misuse

Risk 27
Severity
5.3
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Drupal Open Social allows Functionality Misuse

1 / 3
Source: Packagist
First published (updated )
CVE-2024-13274

Drupal Open SocialOpen Social - Moderately critical - Cross Site Scripting, Denial of Service - SA-CONTRIB-2024-037

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Open Social allows Cross-Site Scripting (XSS).This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5, from 13.0.0 before 13.0.0-alpha11.

First published (updated )
CVE-2024-13273

Drupal Open SocialOpen Social - Moderately critical - Information Disclosure - SA-CONTRIB-2024-005

Risk 66
Severity
9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5.

First published (updated )
CVE-2024-13241

Drupal Open SocialOpen Social - Moderately critical - Access bypass - SA-CONTRIB-2024-004

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05.

First published (updated )
CVE-2024-13240

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203