CVE-2024-45594
CVSS 3.1 Score 7.7 of 10 (high)
Details
Published Nov 13, 2024
Updated: Nov 15, 2024
CWE ID 79
Summary
CVE-2024-45594 is a vulnerability affecting Decidim, an open-source participatory democracy framework. This issue lies in the meeting embeds feature of Decidim's online or hybrid meetings, which can be exploited through malformed URLs to execute Cross-Site Scripting (XSS) attacks. Successful exploitation could lead to unauthorized data access or manipulation. The affected versions are below 0.28.3 and 0.29.0, and users are advised to upgrade to the latest versions to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Decidim
Affected Vendors
- Decidim