VYPR
← All advisories
High severity7.7NVD Advisory· Published Nov 13, 2024· Updated Jun 17, 2026

CVE-2024-45594

CVE-2024-45594

Description

Decidim is a participatory democracy framework. The meeting embeds feature used in the online or hybrid meetings is subject to potential XSS attack through a malformed URL. This vulnerability is fixed in 0.28.3 and 0.29.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
decidim-meetingsRubyGems
>= 0.28.0, < 0.28.30.28.3

Affected products

3
  • Decidim/Decidim2 versions
    cpe:2.3:a:decidim:decidim:*:*:*:*:*:ruby:*:*+ 1 more
    • cpe:2.3:a:decidim:decidim:*:*:*:*:*:ruby:*:*range: >=0.28.0,<0.28.3
    • (no CPE)range: >= 0.28.0, < 0.28.3
  • ghsa-coords
    pkg:gem/decidim-meetings
    Range: >= 0.28.0, < 0.28.3

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.