Executive brief
Decidim vulnerable to sensitive data disclosure
Affected products
- RubyGems decidim-meetings
- RubyGems decidim
Junglewise Threat Intelligence
CVE-2023-34090: Decidim vulnerable to sensitive data disclosure
CVE-2023-34090 · Severity: low · CVSS 3.1 · Published 2023-07-11
Technologies: decidim (RubyGems). Vendors: RubyGems.
Related threats
- Decidim's private data exports can lead to data leaks
- Decidim decidim-meetings XSS in meeting embeds
- Decidim has a cross-site scripting vulnerability in the version control page
- Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin panel with QuillJS WYSWYG editor
- Decidim vulnerable to data disclosure through the embed feature