decidim kayıtları
decidim üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-284 Improper Access Control1
- CWE-672 Operation on a Resource after Expiration or Release1
- CWE-918 Server-Side Request Forgery (SSRF)1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2026-23891İstismar yok | Decidim has a Cross-site scripting (XSS) vulnerability via user name fielddecidim · decidim · CWE-79 | Kritik9,3 | — | %0,4 | 13 Nis 2026 |
32İzleyin | CVE-2025-65017İstismar yok | Decidim's private data exports can lead to data leaksdecidim · decidim · CWE-200 | Yüksek8,2 | — | %0,3 | 3 Şub 2026 |
30İzleyin | CVE-2023-34090İstismar yok | Decidim vulnerable to sensitive data disclosuredecidim · decidim · CWE-200 | Yüksek7,5 | — | %1,3 | 11 Tem 2023 |
29İzleyin | CVE-2023-48220İstismar yok | Decidim's devise_invitable gem vulnerable to circumvention of invitation token expiry perioddecidim · decidim · CWE-672 | Yüksek7,4 | — | %0,8 | 20 Şub 2024 |
28İzleyin | CVE-2023-36465İstismar yok | Decidim has broken access control in templatesdecidim · decidim · CWE-284 | Yüksek7,1 | — | %0,5 | 6 Eki 2023 |
26İzleyin | CVE-2026-40869İstismar yok | Decidim amendments can be accepted or rejected by anyonedecidim · decidim · CWE-266 | Orta6,5 | — | %0,3 | 21 Nis 2026 |
24İzleyin | CVE-2023-32693İstismar yok | Decidim Cross-site Scripting vulnerability in the external link redirectionsdecidim · decidim · CWE-79 | Orta6,1 | — | %0,8 | 11 Tem 2023 |
24İzleyin | CVE-2023-34089İstismar yok | Decidim Cross-site Scripting vulnerability in the processes filterdecidim · decidim · CWE-79 | Orta6,1 | — | %0,7 | 11 Tem 2023 |
22İzleyin | CVE-2023-47635İstismar yok | Decidim vulnerable to possible CSRF attack at questionnaire templates previewdecidim · decidim · CWE-918 | Orta5,7 | — | %0,3 | 20 Şub 2024 |
21İzleyin | CVE-2023-51447İstismar yok | Decidim vulnerable to cross-site scripting (XSS) in the dynamic file uploadsdecidim · decidim · CWE-79 | Orta5,4 | — | %0,5 | 20 Şub 2024 |
21İzleyin | CVE-2024-27090İstismar yok | Decidim vulnerable to data disclosure through the embed featuredecidim · decidim · CWE-200 | Orta5,3 | — | %0,5 | 10 Tem 2024 |
21İzleyin | CVE-2024-45594İstismar yok | Decidim allows cross-site scripting (XSS) in the online or hybrid meeting embedsdecidim · decidim · CWE-79 | Orta5,4 | — | %0,2 | 13 Kas 2024 |
19İzleyin | CVE-2024-32034İstismar yok | Cross-site scripting (XSS) in the decidim admin activity logdecidim · decidim · CWE-79 | Orta4,8 | — | %0,4 | 16 Eyl 2024 |
19İzleyin | CVE-2024-27095İstismar yok | Decidim cross-site scripting (XSS) in the admin paneldecidim · decidim · CWE-79 | Orta4,8 | — | %0,3 | 10 Tem 2024 |
19İzleyin | CVE-2024-39910İstismar yok | Cross-site scripting (XSS) in the decidim admin panel with QuillJS WYSWYG editordecidim · decidim · CWE-79 | Orta4,8 | — | %0,3 | 16 Eyl 2024 |
12İzleyin | CVE-2023-47634İstismar yok | Decidim has race condition in Endorsementsdecidim · decidim · CWE-362 | Düşük3,1 | — | %0,4 | 28 Şub 2024 |
- CVE-2026-2389137İzleyin
Decidim has a Cross-site scripting (XSS) vulnerability via user name field
KritikCVSS 9,3İstismar yokEPSS %0decidim · decidim13 Nis 2026
- CVE-2025-6501732İzleyin
Decidim's private data exports can lead to data leaks
YüksekCVSS 8,2İstismar yokEPSS %0decidim · decidim3 Şub 2026
- CVE-2023-3409030İzleyin
Decidim vulnerable to sensitive data disclosure
YüksekCVSS 7,5İstismar yokEPSS %1decidim · decidim11 Tem 2023
- CVE-2023-4822029İzleyin
Decidim's devise_invitable gem vulnerable to circumvention of invitation token expiry period
YüksekCVSS 7,4İstismar yokEPSS %1decidim · decidim20 Şub 2024
- CVE-2023-3646528İzleyin
Decidim has broken access control in templates
YüksekCVSS 7,1İstismar yokEPSS %1decidim · decidim6 Eki 2023
- CVE-2026-4086926İzleyin
Decidim amendments can be accepted or rejected by anyone
OrtaCVSS 6,5İstismar yokEPSS %0decidim · decidim21 Nis 2026
- CVE-2023-3269324İzleyin
Decidim Cross-site Scripting vulnerability in the external link redirections
OrtaCVSS 6,1İstismar yokEPSS %1decidim · decidim11 Tem 2023
- CVE-2023-3408924İzleyin
Decidim Cross-site Scripting vulnerability in the processes filter
OrtaCVSS 6,1İstismar yokEPSS %1decidim · decidim11 Tem 2023
- CVE-2023-4763522İzleyin
Decidim vulnerable to possible CSRF attack at questionnaire templates preview
OrtaCVSS 5,7İstismar yokEPSS %0decidim · decidim20 Şub 2024
- CVE-2023-5144721İzleyin
Decidim vulnerable to cross-site scripting (XSS) in the dynamic file uploads
OrtaCVSS 5,4İstismar yokEPSS %0decidim · decidim20 Şub 2024
- CVE-2024-2709021İzleyin
Decidim vulnerable to data disclosure through the embed feature
OrtaCVSS 5,3İstismar yokEPSS %0decidim · decidim10 Tem 2024
- CVE-2024-4559421İzleyin
Decidim allows cross-site scripting (XSS) in the online or hybrid meeting embeds
OrtaCVSS 5,4İstismar yokEPSS %0decidim · decidim13 Kas 2024
- CVE-2024-3203419İzleyin
Cross-site scripting (XSS) in the decidim admin activity log
OrtaCVSS 4,8İstismar yokEPSS %0decidim · decidim16 Eyl 2024
- CVE-2024-2709519İzleyin
Decidim cross-site scripting (XSS) in the admin panel
OrtaCVSS 4,8İstismar yokEPSS %0decidim · decidim10 Tem 2024
- CVE-2024-3991019İzleyin
Cross-site scripting (XSS) in the decidim admin panel with QuillJS WYSWYG editor
OrtaCVSS 4,8İstismar yokEPSS %0decidim · decidim16 Eyl 2024
- CVE-2023-4763412İzleyin
Decidim has race condition in Endorsements
DüşükCVSS 3,1İstismar yokEPSS %0decidim · decidim28 Şub 2024