CVE-2023-36465: Improper Access Control

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The templates module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in t...

Decidim Access Control Error Vulnerability

Decidim is a participatory democracy framework, written in Ruby on Rails. An Access Control Error vulnerability exists in Decidim versions prior to 0.26.8, 0.27.4, and 0.27.4, which stems from the templates module not enforcing the correct permissions, which allows any logged in user to access th...

Improper Access Control

Overview decidim-templates is a This module provides a solution to create templates for different Decidim models, such as Proposals and Questionnaires. Affected versions of this package are vulnerable to Improper Access Control due to the broken access control in the templates module. An attacker...

PT-2023-25580

Name of the Vulnerable Software and Affected Versions Decidim versions prior to 0.26.8 Decidim versions prior to 0.27.4 Description Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation...