Skip to content
OpenAdvisories

Product · deco-cx

apps

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-13796 Public exploit

    deco-cx apps Parameter analyticsScript.ts AnalyticsScript server-side request forgery

    A security vulnerability has been detected in deco-cx apps up to 0.120.1. Affected by this vulnerability is the function AnalyticsScript of the file website/loaders/analyticsScript.ts of the component Parameter Handler. Such manipulation of the argument url l…