← Database

CVE-2025-31685

CRITICAL CVSS: 9.1 Published: 2025-03-31 Modified: 2026-06-17

Description

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10.

Affected Platforms

Getopensocial Open Social

Weakness Type

CWE-862

References