Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2025-31686

Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10.

Published: Apr 1, 2025
Updated: Nov 24, 2025
CVE: CVE-2025-31686
GHSA: GHSA-m9w8-wxvp-c9gv
Severity: High
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

CWE-862

Affected Software
References

Software	From	Fixed in
goalgorilla / open_social	-	12.3.11
goalgorilla / open_social	12.4.0	12.4.10
getopensocial / open_social	-	12.3.11
getopensocial / open_social	12.4.0	12.4.10

https://github.com/goalgorilla/open_social/commit/6830b1788616fc24fb3913ce88c5d997a363a5de
https://github.com/goalgorilla/open_social/commit/6fa5181901d4be3a64793f29c6ce0c9bd535a42f
https://www.drupal.org/sa-contrib-2025-015

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo