PT-2025-26959

CVE-2025-48921

Published

2025-06-25

Updated

2025-07-01

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Open Social versions 0.0.0 through 12.3.13 Open Social versions 12.4.0 through 12.4.12

Description: A Cross-Site Request Forgery (CSRF) issue affects the software, allowing unauthorized actions to be performed on behalf of a user. This issue can be exploited to perform actions without the user's knowledge or consent.

Recommendations: For Open Social versions 0.0.0 through 12.3.13, update to version 12.3.14 or later. For Open Social versions 12.4.0 through 12.4.12, update to version 12.4.13 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Alexander Varwijk

Greg Knaddison

Robert Ragas

Vendors

Affected products

Weakness enumeration

CWE-352: Cross-Site Request Forgery (CSRF)