by Kastro
Paper/Archive/CVE-2023-36465

CVE-2023-36465

decidim decidim — Decidim has broken access control in templates

EPSS 0.7%CVSS 9.1
critical.is priorityof 100
38
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 52.2.522 × 2010.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. The `templates` module doesn't enforce the correct permissions, allowing any logged-in user to access to this functionality in the administration panel. An attacker could use this vulnerability to change, create or delete templates of surveys. This issue has been patched in version 0.26.8 and 0.27.4.

Affected

ProductAffectedFixed inSource
decidim>= 0.23.2, < 0.26.8–CNA
decidim>= 0.27.0, < 0.27.4–CNA

Scores by source

GitHub_M (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refgithub.com/decidim/decidim/security/advisories/GHSA-639h-86hw-qcjqrefgithub.com/decidim/decidim/releases/tag/v0.26.8refgithub.com/decidim/decidim/releases/tag/v0.27.4