4 matches found
Decidim - CSV census record endpoints improper authorization
Description A participant manager can access and modify the CSV census record admin forms. Impact Any participant admin can create, alter, or remove CSV census rows, which can corrupt verification data relied on by authorization workflows. Credits This issue was discovered in a security audit...
6CVSS6.1AI score0.00396EPSS
SaveExploits0References1Affected Software1
20