2 matches found
Decidim - Verification admins can access supplied IDs from other organizations
Description The verification admin mutation flow allows accessing, verifying, and rejecting participants records from another tenant. Impact A tenant admin can access, reject or approve another tenant's iddocuments requests. Credits This issue was discovered in a security audit organized by the...
4.9CVSS6.1AI score0.00347EPSS
SaveExploits0References1Affected Software1
20