Open Social is a Drupal distribution for online communities, which ships with a default (optional) module social\_language to make your platform multilingual. Some site administration configuration does not correctly check access when trying to translate allowing unauthorised people to translate these parts. The issue is mitigated by the fact that social\_language needs to be enabled with more than 1 language.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-31685US | —OT elevated | — | ||
Missing Authorization vulnerability in Drupal Open Social allows Forceful Browsing.This issue affects Open Social: from 0.0.0 before 12.3.11, from 12.4.0 before 12.4.10. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan