Lucene search
+L

5 matches found

OSV
OSV
added 2026/07/13 5:17 p.m.8 views

GHSA-Q79H-67VX-M9XG Decidim: CSV census record endpoints improper authorization

Description A participant manager can access and modify the CSV census record admin forms. Technical description The CSV census admin record-management surface under /admin/csvcensus/censuslogs does not enforce admin-only authorization before rendering or mutating Decidim::Verifications::CsvDatum...

6CVSS6.2AI score
SaveExploits0References4
Rows per page
Query Builder