Vulnerabilities in decidim

29 results
Vexday analysis

Decidim tem 19 vulnerabilidades registradas, com 2 classificadas como críticas e nenhuma sob ataque ativo no momento. A fraqueza dominante é XSS (CWE-79), padrão em plataformas web, sem eventos de publicação nos últimos 90 dias, indicando risco estabilizado e não imediato.

CVE-2024-27095MEDIUMDecidim cross-site scripting (XSS) in the admin panelEPSS 0.3%CVE-2026-40869HIGHDecidim amendments can be accepted or rejected by anyoneEPSS 0.3%CVE-2023-47635MEDIUMDecidim vulnerable to possible CSRF attack at questionnaire templates previewEPSS 0.3%CVE-2026-45086MEDIUMDecidim: Forms admin question editor lacks authorizationEPSS 0.3%CVE-2025-65017HIGHDecidim's private data exports can lead to data leaksEPSS 0.3%CVE-2024-39910MEDIUMCross-site scripting (XSS) in the decidim admin panel with QuillJS WYSWYG editorEPSS 0.3%CVE-2026-45573MEDIUMDecidim: Push subscriptions can be abused for server-side requestsEPSS 0.3%CVE-2026-45572MEDIUMDecidim: HTML content blocks allow stored script executionEPSS 0.3%CVE-2024-45594HIGHDecidim allows cross-site scripting (XSS) in the online or hybrid meeting embedsEPSS 0.2%