PT-2025-26959 · Unknown · Open Social

Alexander Varwijk + 2 · Published 2025-06-25 · Updated 2025-07-01 · CVE-2025-48921

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Open Social versions 0.0.0 through 12.3.13 Open Social versions 12.4.0 through 12.4.12

Description: A Cross-Site Request Forgery (CSRF) issue affects the software, allowing unauthorized actions to be performed on behalf of a user. This issue can be exploited to perform actions without the user's knowledge or consent.

Recommendations: For Open Social versions 0.0.0 through 12.3.13, update to version 12.3.14 or later. For Open Social versions 12.4.0 through 12.4.12, update to version 12.4.13 or later.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-48921

DRUPAL-CONTRIB-2025-079

Affected Products

Open Social

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-48921 · Security Note
• https://osv.dev/vulnerability/DRUPAL-CONTRIB-2025-079 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-48921 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1938371974826238271 · Twitter Post
• https://t.me/cvenotify/126776 · Telegram Post
• https://twitter.com/CVEnew/status/1938235180176802138 · Twitter Post
• https://twitter.com/cracbot/status/1940002504537690515 · Twitter Post
• https://drupal.org/sa-contrib-2025-079 · Note