decidim vulnerabilities (RubyGems)
13 vulnerabilities.
-
decidimRubyGems Decidim: JWT-backed authentication can be replayed across organizations 8.5 High -
decidimRubyGems Decidim's private data exports can lead to data leaks 8.2 High -
decidimRubyGems Decidim has a cross-site scripting vulnerability in the version control page 7.1 High -
decidimRubyGems Cross-site scripting (XSS) in the decidim admin panel with QuillJS WYSWYG editor 5.4 Medium -
decidimRubyGems Decidim has cross-site scripting (XSS) in the pagination 7.1 High -
decidimRubyGems Decidim vulnerable to data disclosure through the embed feature 5.3 Medium -
decidimRubyGems Decidim vulnerable to cross-site scripting (XSS) in the dynamic file uploads 6.3 Medium -
decidimRubyGems Decidim's devise_invitable gem vulnerable to circumvention of invitation token expiry period 5.7 Medium -
decidimRubyGems Decidim has race condition in Endorsements 3.1 Low -
decidimRubyGems Decidim has broken access control in templates 9.1 Critical -
decidimRubyGems Decidim Cross-site Scripting vulnerability in the processes filter 8.1 High -
decidimRubyGems Decidim vulnerable to sensitive data disclosure 7.5 High -
decidimRubyGems Decidim Cross-site Scripting vulnerability in the external link redirections 8.1 High