Lucene search
+L

81 matches found

RubySec
RubySec
added 2026/07/13 12:0 a.m.7 views

Decidim - Forms admin question editor lacks authorization

Description A participant can load the demographics questionnaire admin editor and make changes. Impact - Low-privilege users can access questionnaire-admin interfaces. - They can read question-management surfaces that should remain limited to questionnaire managers. Credits This issue was...

6.1AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder