CVE-2024-45594

Description

Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0.

Reserved 2024-09-02 | Published 2024-11-13 | Updated 2024-11-13 | Assigner GitHub_M

Problem types

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Product status

>= 0.28.0, < 0.28.3
affected

References

github.com/...ecidim/security/advisories/GHSA-j4h6-gcj7-7v9v

cve.org (CVE-2024-45594)

nvd.nist.gov (CVE-2024-45594)

Download JSON