Cross-Site Request Forgery (CSRF)

decidim-templates is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability is due to the CSRF authenticity token check being disabled for the questionnaire templates preview. This flaw allows attackers to gain access to information which was not meant to be public...

Server-Side Request Forgery (SSRF)

Overview decidim-templates is a This module provides a solution to create templates for different Decidim models, such as Proposals and Questionnaires. Affected versions of this package are vulnerable to Server-Side Request Forgery SSRF due to the authenticity token check being disabled for the...

Improper Access Control

Overview decidim-templates is a This module provides a solution to create templates for different Decidim models, such as Proposals and Questionnaires. Affected versions of this package are vulnerable to Improper Access Control due to the broken access control in the templates module. An attacker...