CVE-2025-48921

CVE-2025-48921: Open Social - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-079

Vendor Drupal
Product Open Social
Weakness CWE-352 · CSRF
Published June 26, 2025
Last update June 26, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Open Social allows Cross Site Request Forgery.This issue affects Open Social: from 0.0.0 before 12.3.14, from 12.4.0 before 12.4.13.

Key dates

02Disclosure timeline

June 26, 2025 CVE published
June 26, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-3145 DedeCMS makehtml_js_action.php cross-site request forgery CVE-2023-27445 WordPress Blog Floating Button Plugin <= 1.4.12 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2025-64262 WordPress Auto Prune Posts plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2023-4937 BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Manipulation CVE-2023-0725 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder