Lucene search

Decidim-Awesome has SQL injection in AdminAccountability

🗓️ 12 Nov 2024 19:22:52Reported by GitHub Advisory DatabaseType

Decidim-Awesome SQL injection in AdminAccountability, allowing code execution, privilege escalation, and information disclosure

Reporter	Title	Published	Views	Family All 8
Cvelist	CVE-2024-43415 Decidim-Awesome: SQL injection in AdminAccountability	12 Nov 202415:45	–	cvelist
NVD	CVE-2024-43415	12 Nov 202416:15	–	nvd
CVE	CVE-2024-43415	12 Nov 202416:15	–	cve
Vulnrichment	CVE-2024-43415 Decidim-Awesome: SQL injection in AdminAccountability	12 Nov 202415:45	–	vulnrichment
OSV	Decidim-Awesome has SQL injection in AdminAccountability	12 Nov 202419:52	–	osv
OSV	CVE-2024-43415	12 Nov 202416:15	–	osv
RubySec	Decidim-Awesome has SQL injection in AdminAccountability	11 Nov 202421:00	–	rubygems
Veracode	SQL Injection	4 Dec 202419:06	–	veracode

Vulners

Node

decidim decidim-decidim_awesomeRange0.11.0–0.11.2

decidim decidim-decidim_awesomeRange0.9.1–0.10.3

Source	Link
github	www.github.com/decidim-ice/decidim-module-decidim_awesome/security/advisories/GHSA-cxwf-qc32-375f
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-43415
github	www.github.com/decidim-ice/decidim-module-decidim_awesome/commit/84374037d34a3ac80dc18406834169c65869f11b
pentest	www.pentest.ait.ac.at/security-advisory/decidim-awesome-sql-injection-in-adminaccountability
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim-decidim_awesome/CVE-2024-43415.yml
github	www.github.com/advisories/GHSA-cxwf-qc32-375f

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Nov 2024 19:52Current

9.3High risk

Vulners AI Score9.3

CVSS39

EPSS0.0004

SSVC

CWE-89