CVE-2024-27095 Decidim cross-site scripting (XSS) in the admin panel

Decidim is a participatory democracy framework. The admin panel is subject to potential XSS attach in case the attacker manages to modify some records being uploaded to the server. This vulnerability is fixed in 0.27.6 and 0.28.1...

Decidim Competitive Conditions Problem Vulnerability

Decidim is a participatory democracy framework written in Ruby on Rails. Decidim suffers from a security vulnerability that stems from the presence of a race condition...

Decidim security breach

Decidim is a participatory democracy framework, written in Ruby on Rails. A security vulnerability exists in Decidim , decidim-admin, decidim-system, deviseinvitable versions prior to 0.26.9, 0.27.5, and 0.28.0, which stems from an invitation feature that allows users to accept invitations...

Decidim Cross-Site Scripting Vulnerability

Decidim is a participatory democracy framework written in Ruby on Rails. A cross-site scripting vulnerability exists in Decidim versions 0.27.0 through 0.27.5 and 0.28.0, which stems from a cross-site scripting vulnerability in the dynamic file upload feature...

Decidim 跨站脚本漏洞

Decidim is a participatory democracy framework written in Ruby on Rails. Decidim suffers from a cross-site scripting vulnerability that stems from susceptibility to cross-site scripting and allows remote attackers to execute JavaScript code in the context of the currently logged in user...

Decidim 信息泄露漏洞

Decidim is a participatory democracy framework written in Ruby on Rails. An information disclosure vulnerability exists in versions of Decidim prior to 0.27.3, which stems from allowing all data attributes and associations to be filtered, allowing an unauthenticated, remote attacker to steal...