{"id":"DRUPAL-CONTRIB-2025-014","details":"Open Social is a Drupal distribution for online communities, which ships with a default (optional) module social\\_language to make your platform multilingual.\n\nSome site administration configuration does not correctly check access when trying to translate allowing unauthorised people to translate these parts.\n\nThe issue is mitigated by the fact that social\\_language needs to be enabled with more than 1 language.","aliases":["CVE-2025-31685","GHSA-gf72-h4cp-wcm4"],"modified":"2026-03-18T18:00:07.430178Z","published":"2025-02-12T17:37:40Z","withdrawn":"2026-03-18T18:00:07.430178Z","references":[{"type":"WEB","url":"https://www.drupal.org/sa-contrib-2025-014"}],"affected":[{"package":{"name":"drupal/social","ecosystem":"Packagist:https://packages.drupal.org/8","purl":"pkg:composer/drupal/social"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.3.11"}],"database_specific":{"constraint":"\u003c12.3.11"}},{"type":"ECOSYSTEM","events":[{"introduced":"12.4.0"},{"fixed":"12.4.10"}],"database_specific":{"constraint":"\u003e=12.4.0 \u003c12.4.10"}}],"database_specific":{"affected_versions":"\u003c12.3.11 || \u003e=12.4.0 \u003c12.4.10 ","source":"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/social/DRUPAL-CONTRIB-2025-014.json"}}],"schema_version":"1.7.3","credits":[{"name":"Robert Ragas (robertragas)","contact":["https://www.drupal.org/u/robertragas"]},{"name":"zanvidmar","contact":["https://www.drupal.org/u/zanvidmar"]}]}