CVE-2024-13240: DRUPAL-CONTRIB-2024-004 - Content within Open Social can have different visibilities. It is possible for a user to create public content even when this should not be

CVE-2024-13240 · Severity: info · Published 2024-01-24

Technologies: Packagist:Https://Packages.Drupal.Org/8 Drupal/Social. Vendors: Packagist:Https://Packages.Drupal.Org/8.

Executive brief

Content within Open Social can have different visibilities. It is possible for a user to create public content even when this should not be allowed. This vulnerability is mitigated by the fact that the site must have public visibility disabled on a global level.

Affected products

packagist:https://packages.drupal.org/8 drupal/social

Related threats

DRUPAL-CONTRIB-2025-079 - Open Social is a Drupal distribution for online communities, which ships with a default module that allows users to enroll in events. The m
Drupal Open Social Missing Authorization vulnerability
Drupal Open Social Missing Authorization vulnerability
Drupal Open Social allows Functionality Misuse
DRUPAL-CONTRIB-2024-076 - Open Social is a Drupal distribution for online communities, which ships with a default (optional) module social\_file\_private to ensure th