Executive brief
Decidim has a cross-site scripting vulnerability in the version control page
Affected products
- RubyGems decidim
Junglewise Threat Intelligence
CVE-2024-41673: Decidim has a cross-site scripting vulnerability in the version control page
CVE-2024-41673 · Severity: low · CVSS 3.1 · Published 2024-10-01
Technologies: decidim (RubyGems). Vendors: RubyGems.
Related threats
- Decidim's private data exports can lead to data leaks
- Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin panel with QuillJS WYSWYG editor
- Decidim vulnerable to data disclosure through the embed feature
- Cross-site scripting (XSS) in the dynamic file uploads
- Decidim vulnerable to sensitive data disclosure