Lucene search
+L

1 matches found

RubySec
RubySec
added 2024/02/20 12:0 a.m.22 views

Possible CSRF attack at questionnaire templates preview

Impact The CSRF authenticity token check is currently disabled for the questionnaire templates preview as per: https://github.com/decidim/decidim/blob/3187bdfd40ea1c57c2c12512b09a7fec0b2bed08/decidim-templates/app/controllers/decidim/templates/admin/questionnairetemplatescontroller.rbL11 This was...

5.7CVSS7.2AI score0.00313EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder