Vulnerabilities in decidim

28 results
Vexday analysis

Decidim tem 19 vulnerabilidades registradas, com 2 classificadas como críticas e nenhuma sob ataque ativo no momento. A fraqueza dominante é XSS (CWE-79), padrão em plataformas web, sem eventos de publicação nos últimos 90 dias, indicando risco estabilizado e não imediato.

CVE-2026-45330MEDIUMDecidim: Verification admins can access supplied IDs from other organisationsEPSS 0.3%CVE-2026-45377MEDIUMDecidim: Private exports can be downloaded through reusable linksEPSS 0.3%CVE-2025-65017HIGHDecidim's private data exports can lead to data leaksEPSS 0.3%CVE-2024-39910MEDIUMCross-site scripting (XSS) in the decidim admin panel with QuillJS WYSWYG editorEPSS 0.3%CVE-2024-45594HIGHDecidim allows cross-site scripting (XSS) in the online or hybrid meeting embedsEPSS 0.2%CVE-2026-40869HIGHDecidim amendments can be accepted or rejected by anyoneEPSS 0.2%CVE-2026-45572MEDIUMDecidim: HTML content blocks allow stored script executionEPSS 0.2%CVE-2026-45086MEDIUMDecidim: Forms admin question editor lacks authorizationEPSS 0.2%