Decidim has a cross-site scripting vulnerability in the version control page

Mô tả

Tham khảo

• decidim/decidim security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-41673 · ADVISORY
• decidim/decidim commit 8a18c8b · WEB
• decidim/decidim · PACKAGE
• rubysec/ruby-advisory-db · WEB

Lỗ hổng khác của decidim

• CVE-2026-45414CAO 8.5Decidim is a participatory democracy framework. Prior to 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, JWT-backed API authentication is not bo…
• CVE-2025-65017TRUNG BÌNH 6.5Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private d…
• CVE-2024-39910TRUNG BÌNH 4.8decidim is a Free Open-Source participatory democracy, citizen participation and open government for cities and organizations. The WYSWYG ed…
• CVE-2024-32469CAO 7.1Decidim is a participatory democracy framework. The pagination feature used in searches and filters is subject to potential XSS attack throu…
• CVE-2024-27090TRUNG BÌNH 5.3Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and …