Robert Ragas

Name of the Vulnerable Software and Affected Versions: Open Social versions 0.0.0 through 12.3.13 Open Social versions 12.4.0 through 12.4.12 Description: A Cross-Site Request Forgery (CSRF) issue affects the software, allowing unauthorized actions to be performed on behalf of a user. This issue can be exploited to perform actions without the user's knowledge or consent. Recommendations: For Open Social versions 0.0.0 through 12.3.13, update to version 12.3.14 or later. For Open Social versions 12.4.0 through 12.4.12, update to version 12.4.13 or later.

The issue is related to a Missing Authorization vulnerability in Drupal Open Social, which allows Forceful Browsing.

The issue is related to a Missing Authorization vulnerability in Drupal Open Social, which allows Forceful Browsing.

The issue is related to a lack of authorization in Drupal Open Social, which allows forceful browsing. This problem can be exploited by a remote attacker to bypass security restrictions and perform a forceful browsing attack.

The issue is related to improper access control in Drupal Open Social, allowing the collection of data from common resource locations. This can be exploited by a remote attacker to bypass security restrictions.