Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2025-31685

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10.

Published: Apr 1, 2025
Updated: Nov 24, 2025
CVE: CVE-2025-31685
GHSA: GHSA-gf72-h4cp-wcm4
Severity: Medium
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CWEs:

CWE-862

Affected Software
References

Software	From	Fixed in
goalgorilla / open_social	-	12.3.11
goalgorilla / open_social	12.4.0	12.4.10
getopensocial / open_social	-	12.3.11
getopensocial / open_social	12.4.0	12.4.10

https://github.com/goalgorilla/open_social/commit/52c531e156fb8653e47ab99df432c4fb9651f36e
https://github.com/goalgorilla/open_social/commit/6ebeed01c83dc4947a5c3689bc33b4deca574473
https://www.drupal.org/sa-contrib-2025-014

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo