CVE-2023-36465

Summary

CVE-2023-36465 is a vulnerability affecting Decidim, a participatory democracy framework used by the Barcelona City government. This issue resides in the `templates` module, which fails to enforce appropriate permissions. As a result, any logged-in user can gain unauthorized access to template functionality in the administration panel. An attacker could exploit this weakness to modify, create, or delete templates associated with surveys. This vulnerability has been addressed in Decidim versions 0.26.8 and 0.27.4.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.