Skip to content
OpenAdvisories

Package · RubyGems

decidim-templates

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.5
    CVE-2023-47635

    Decidim vulnerable to possible CSRF attack at questionnaire templates preview

    Decidim is a participatory democracy framework. Starting in version 0.23.0 and prior to versions 0.27.5 and 0.28.0, the CSRF authenticity token check is disabled for the questionnaire templates preview. The issue does not imply a serious security thread as yo…

    decidim decidim decidim-templates RubyGems
  • Critical 9.1
    CVE-2023-36465

    Decidim has broken access control in templates

    Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The `templates` module doesn't enforce the correct permissions, allowing any logged-in u…

    decidim decidim decidim decidim-templates RubyGems