Decidim has a cross-site scripting vulnerability in the version control page

概要

参考情報

• decidim/decidim security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-41673 · ADVISORY
• decidim/decidim commit 8a18c8b · WEB
• decidim/decidim · PACKAGE
• rubysec/ruby-advisory-db · WEB

decidim のその他の脆弱性

• CVE-2026-45414高 8.5Decidim is a participatory democracy framework. Prior to 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, JWT-backed API authentication is not bo…
• CVE-2025-65017中 6.5Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private d…
• CVE-2024-39910中 4.8decidim is a Free Open-Source participatory democracy, citizen participation and open government for cities and organizations. The WYSWYG ed…
• CVE-2024-32469高 7.1Decidim is a participatory democracy framework. The pagination feature used in searches and filters is subject to potential XSS attack throu…
• CVE-2024-27090中 5.3Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and …