Medium severity5.3NVD Advisory· Published Jan 9, 2025· Updated Jun 17, 2026

CVE-2024-13274

Description

Improper Control of Interaction Frequency vulnerability in Drupal Open Social allows Functionality Misuse.This issue affects Open Social: from 0.0.0 before 12.3.8, from 12.4.0 before 12.4.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
goalgorilla/open_socialPackagist	< 12.3.8	12.3.8
goalgorilla/open_socialPackagist	>= 12.4.0, < 12.4.5	12.4.5
goalgorilla/open_socialPackagist	>= 13.0.0-alpha1, < 13.0.0-alpha11	13.0.0-alpha11

Affected products

Getopensocial/Open Social
cpe:2.3:a:getopensocial:open_social:*:*:*:*:*:drupal:*:*
Range: <12.3.8
ghsa-coords
pkg:composer/goalgorilla/open_social
Range: < 12.3.8
Drupal/Open Socialcpe-rescue
Range: 0.0.0

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-63wg-87qv-rw4rghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-13274ghsaADVISORY
www.drupal.org/sa-contrib-2024-038nvdVendor AdvisoryWEB

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000