Unknown · Drupal Cms · CVE-2024-13274
**Name of the Vulnerable Software and Affected Versions**
Open Social versions 0.0.0 through 12.3.8
Open Social versions 12.4.0 through 12.4.5
**Description**
The issue is related to insufficient control over interaction frequency in the Open Social module of the Drupal CMS system. This can be exploited by a remote attacker to cause a denial of service. The problem allows for misuse of functionality due to improper control of interaction frequency.
**Recommendations**
For Open Social versions 0.0.0 through 12.3.8, update to a version after 12.3.8 to resolve the issue.
For Open Social versions 12.4.0 through 12.4.5, update to a version after 12.4.5 to resolve the issue.
As a temporary workaround, consider restricting access to the password reset form to minimize the risk of exploitation.