diff --git a/advisories/github-reviewed/2024/07/GHSA-7cx8-44pc-xv3q/GHSA-7cx8-44pc-xv3q.json b/advisories/github-reviewed/2024/07/GHSA-7cx8-44pc-xv3q/GHSA-7cx8-44pc-xv3q.json index adb2c27ce27..9775ccb9b07 100644 --- a/advisories/github-reviewed/2024/07/GHSA-7cx8-44pc-xv3q/GHSA-7cx8-44pc-xv3q.json +++ b/advisories/github-reviewed/2024/07/GHSA-7cx8-44pc-xv3q/GHSA-7cx8-44pc-xv3q.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-7cx8-44pc-xv3q", - "modified": "2024-07-11T21:36:51Z", + "modified": "2024-07-24T13:54:25Z", "published": "2024-07-10T15:43:39Z", "aliases": [ "CVE-2024-32469" ], "summary": "Decidim cross-site scripting (XSS) in the pagination", - "details": "### Impact\n\nThe pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter `per_page`. \n\n### Patches\n\nPatched in version 0.27.6 and 0.28.1\n\n### References\n\nOWASP ASVS v4.0.3-5.1.3\n\n### Credits\n\nThis issue was discovered in a security audit organized by the [mitgestalten Partizipationsbüro](https://partizipationsbuero.at/) and funded by [netidee](https://www.netidee.at/) against Decidim done during April 2024. The security audit was implemented by [AIT Austrian Institute of Technology GmbH](https://www.ait.ac.at/),\n", + "details": "### Impact\n\nThe pagination feature used in searches and filters is subject to potential XSS attack through a malformed URL using the GET parameter `per_page`. \n\n### Patches\n\nNot available\n\n### Workarounds\n\nNot available\n\n### References\n\nOWASP ASVS v4.0.3-5.1.3\n\n### Credits\n\nThis issue was discovered in a security audit organized by the [mitgestalten Partizipationsbüro](https://partizipationsbuero.at/) and funded by [netidee](https://www.netidee.at/) against Decidim done during April 2024. The security audit was implemented by [AIT Austrian Institute of Technology GmbH](https://www.ait.ac.at/),\n", "severity": [ { "type": "CVSS_V3",