CVE-2024-13241
EPSS 0.34%
描述
Open Social is a Drupal distribution for online communities. The included optional social\_group\_flexible\_group module doesn't sufficiently validate group updates. The lack of validation makes it possible to have content inside the group changing it's visibility, which could lead to that content being shown to a broader audience than intended. This vulnerability is mitigated by the fact the module social\_group\_flexible\_group needs to be enabled.
如何修補 CVE-2024-13241
要修補 CVE-2024-13241,請將受影響套件升級到下列已修補版本。
- Packagist/drupal/social—升級至 12.0.5 或更新版本
CVE-2024-13241 正在被利用嗎?
低 — EPSS 為 0.3%,目前沒有觀察到大規模利用活動。
受影響套件(1)
- from 0, < 12.0.5