decidim-core vulnerabilities (RubyGems)
9 vulnerabilities.
-
decidim-coreRubyGems Decidim: Push subscriptions can be abused for server-side requests 6.4 Medium -
decidim-coreRubyGems Decidim: HTML content blocks allow stored script execution 4.8 Medium -
decidim-coreRubyGems Decidim: Private exports can be downloaded through reusable links 6.5 Medium -
decidim-coreRubyGems Decidim amendments can be accepted or rejected by anyone 7.5 High -
decidim-coreRubyGems Decidim has a Cross-site scripting (XSS) vulnerability via user name field 9.3 Critical -
decidim-coreRubyGems Decidim's private data exports can lead to data leaks 8.2 High -
decidim-coreRubyGems Decidim vulnerable to cross-site scripting (XSS) in the dynamic file uploads 6.3 Medium -
decidim-coreRubyGems Decidim Cross-site Scripting vulnerability in the processes filter 8.1 High -
decidim-coreRubyGems Decidim Cross-site Scripting vulnerability in the external link redirections 8.1 High