Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2023-36465

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-639h-86hw-qcjq

Decidim has broken access control in templates ### Impact The `templates` module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in the administration panel. An attacker could use this vulnerability to change, create or delete templates of surveys.

gitlab/gem/decidim/CVE-2023-36465

Decidim has broken access control in templates ### Impact The `templates` module does not enforce the correct permissions, allowing any logged-in user to access to this functionality in the administration panel. An attacker could use this vulnerability to change, create or delete templates of surveys.

gitlab/gem/decidim-templates/CVE-2023-36465

Decidim has broken access control in templates ### Impact The `templates` module does not enforce the correct permissions, allowing any logged-in user to access to this functionality in the administration panel. An attacker could use this vulnerability to change, create or delete templates of surveys.

ruby_advisory_db/gems/decidim/CVE-2023-36465

Decidim has broken access control in templates ### Impact The `templates` module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in the administration panel. An attacker could use this vulnerability to change, create or delete templates of surveys.

ruby_advisory_db/gems/decidim-templates/CVE-2023-36465

Decidim has broken access control in templates ### Impact The `templates` module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in the administration panel. An attacker could use this vulnerability to change, create or delete templates of surveys.