Lucene search
+L

1 matches found

RubySec
RubySec
added 2026/07/13 12:0 a.m.13 views

Decidim - Forms admin question editor lacks authorization

Description A participant can load the demographics questionnaire admin editor and make changes. Impact - Low-privilege users can access questionnaire-admin interfaces. - They can read question-management surfaces that should remain limited to questionnaire managers. Credits This issue was...

5.4CVSS6.1AI score0.00171EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder