Lucene search
+L

2 matches found

RubySec
RubySec
added 2026/07/13 12:00 a.m.16 views

Decidim - Verification admins can access supplied IDs from other organizations

Description The verification admin mutation flow allows accessing, verifying, and rejecting participants records from another tenant. Impact A tenant admin can access, reject or approve another tenant's iddocuments requests. Credits This issue was discovered in a security audit organized by the...

4.9CVSS6.1AI score0.00347EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder