Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-13274 EUVD-2025-0076GHSA-63wg-87qv-rw4r

Open Social - Moderately critical - Denial of Service - SA-CONTRIB-2024-038

Published Jan 9, 2025 · Updated Jan 14, 2025 · Assigned by drupal

Description

Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5.

Affected products

VendorProductAffectedFixed
Drupal Open Social 0.0.0 – < 12.3.8, 12.4.0 – < 12.4.5 12.3.8

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist goalgorilla/open_social < 12.3.8 12.3.8 GHSA-63wg-87qv-rw4r
Packagist goalgorilla/open_social >= 12.4.0, < 12.4.5 12.4.5 GHSA-63wg-87qv-rw4r
Packagist goalgorilla/open_social >= 13.0.0-alpha1, < 13.0.0-alpha11 13.0.0-alpha11 GHSA-63wg-87qv-rw4r

Advisories 1

References