Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2024-13274

Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5.

VectorNETWORK

PublishedJan 09, 2025, 20:15

Published Bymlhess@drupal.org

Base Score

Score5.3

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

goalgorilla/open_social(Packagist)012.3.8N/A

goalgorilla/open_social(Packagist)12.4.012.4.5N/A

goalgorilla/open_social(Packagist)13.0.0-alpha113.0.0-alpha11N/A

References

https://www.drupal.org/sa-contrib-2024-038

Weakness Type

CWE-799

CVSS Metrics

Base Score

5.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK