Skip to content
OpenAdvisories

Package · RubyGems

decidim-templates

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.5
    CVE-2023-47635

    Decidim vulnerable to possible CSRF attack at questionnaire templates preview

    Decidim is a participatory democracy framework. Starting in version 0.23.0 and prior to versions 0.27.5 and 0.28.0, the CSRF authenticity token check is disabled for the questionnaire templates preview. The issue does not imply a serious security thread as yo…

    decidim decidim decidim-templates RubyGems