Decidim · Decidim · CVE-2024-45594
Name of the Vulnerable Software and Affected Versions:
Decidim versions prior to 0.28.3
Decidim versions prior to 0.29.0
Description:
Decidim is a participatory democracy framework. The meeting embeds feature used in online or hybrid meetings is subject to potential XSS attack through a malformed URL.
Recommendations:
For versions prior to 0.28.3, update to version 0.28.3 or later.
For versions prior to 0.29.0, update to version 0.29.0 or later.
As a temporary workaround, consider disabling the creation of meetings by participants in the meeting component until a patch is available.