DRUPAL-CONTRIB-2025-014
Withdrawn 2026-03-18. This finding no longer applies and is kept for reference. It is not used when checking packages.
Details
Open Social is a Drupal distribution for online communities, which ships with a default (optional) module social\_language to make your platform multilingual.
Some site administration configuration does not correctly check access when trying to translate allowing unauthorised people to translate these parts.
The issue is mitigated by the fact that social\_language needs to be enabled with more than 1 language.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist:https://packages.drupal.org/8/drupal/social
Introduced in:
0Fixed in: 12.3.11Upgrade drupal/social to 12.3.11 or newer (ecosystem packagist:https://packages.drupal.org/8).