Lucene search

Decidim-Awesome has SQL injection in AdminAccountability

🗓️ 12 Nov 2024 19:22:52Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Decidim-Awesome SQL injection in AdminAccountability. CWE-89 vulnerability in the vendor Decidim International Community Environment allows remote code execution, escalation of privileges, and information disclosure through admin_role_actions method

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2024-43415	12 Nov 202416:15	–	nvd
Cvelist	CVE-2024-43415 Decidim-Awesome: SQL injection in AdminAccountability	12 Nov 202415:45	–	cvelist
CVE	CVE-2024-43415	12 Nov 202416:15	–	cve
Vulnrichment	CVE-2024-43415 Decidim-Awesome: SQL injection in AdminAccountability	12 Nov 202415:45	–	vulnrichment
OSV	CVE-2024-43415	12 Nov 202416:15	–	osv
Veracode	SQL Injection	4 Dec 202419:06	–	veracode
Github Security Blog	Decidim-Awesome has SQL injection in AdminAccountability	12 Nov 202419:52	–	github
RubySec	Decidim-Awesome has SQL injection in AdminAccountability	11 Nov 202421:00	–	rubygems

Source	Link
github	www.github.com/decidim-ice/decidim-module-decidim_awesome/security/advisories/GHSA-cxwf-qc32-375f
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-43415
github	www.github.com/decidim-ice/decidim-module-decidim_awesome/commit/84374037d34a3ac80dc18406834169c65869f11b
github	www.github.com/decidim-ice/decidim-module-decidim_awesome
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim-decidim_awesome/CVE-2024-43415.yml
pentest	www.pentest.ait.ac.at/security-advisory/decidim-awesome-sql-injection-in-adminaccountability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Nov 2024 19:52Current

9.3High risk

Vulners AI Score9.3

CVSS39

EPSS0.0004

SSVC