CVE-2023-34089

Summary

CVE-2023-34089 is a Cross-site scripting (XSS) vulnerability affecting Decidim, a participatory democracy framework used by various governments, including Barcelona's online platform. The flaw lies in the processes filter feature, which is susceptible to XSS attacks. An attacker can exploit this vulnerability to inject malicious JavaScript code and execute it in the context of a currently logged-in user. This could lead to endorsing or supporting proposals without the user's knowledge or intention. The issue was resolved in Decidim versions 0.27.3 and 0.26.7.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.