CVE-2024-13312: Getopensocial Open Social

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 11.8.0 before 12.3.10, from 12.4.0 before 12.4.9.

Affected products

• Getopensocial Open Social: from 11.8.0, before 12.3.10 (fixed in 12.3.10); from 12.4.0, before 12.4.9 (fixed in 12.4.9)

Published 2025-01-09. Last modified 2026-06-17.