netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-7cx8-44pc-xv3q

Browse Source
This commit is contained in:
advisory-database[bot]
2024-07-24 13:55:54 +00:00
parent 6dc9713d9a
commit 5cfcae6b42
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/07/GHSA-7cx8-44pc-xv3q/GHSA-7cx8-44pc-xv3q.json
+2 -2
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7cx8-44pc-xv3q",
"modified": "2024-07-11T21:36:51Z",
"modified": "2024-07-24T13:54:25Z",
"published": "2024-07-10T15:43:39Z",
"aliases": [
"CVE-2024-32469"
],
"summary": "Decidim cross-site scripting (XSS) in the pagination",
"details": "### Impact\n\nThe pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter `per_page`. \n\n### Patches\n\nPatched in version 0.27.6 and 0.28.1\n\n### References\n\nOWASP ASVS v4.0.3-5.1.3\n\n### Credits\n\nThis issue was discovered in a security audit organized by the [mitgestalten Partizipationsbüro](https://partizipationsbuero.at/) and funded by [netidee](https://www.netidee.at/) against Decidim done during April 2024. The security audit was implemented by [AIT Austrian Institute of Technology GmbH](https://www.ait.ac.at/),\n",
"details": "### Impact\n\nThe pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter `per_page`. \n\n### Patches\n\nNot available\n\n### Workarounds\n\nNot available\n\n### References\n\nOWASP ASVS v4.0.3-5.1.3\n\n### Credits\n\nThis issue was discovered in a security audit organized by the [mitgestalten Partizipationsbüro](https://partizipationsbuero.at/) and funded by [netidee](https://www.netidee.at/) against Decidim done during April 2024. The security audit was implemented by [AIT Austrian Institute of Technology GmbH](https://www.ait.ac.at/),\n",
"severity": [
{
"type": "CVSS_V3",