Threats tagged 'ghsa-vq6j-hj8w-7v39'

Decidim's demographics questionnaire admin editor lacks proper authorization checks, allowing normal participants to access and modify the admin question editor interface. This vulnerability permits low-privilege users to reach and interact with question-management features that should be restricted to administrators. The issue affects versions 0.31.0 up to but not including 0.31.5 of the decidim-demographics module. A patch is available as referenced in the Decidim GitHub repository. As a workaround, disabling the decidim-demographics module can prevent exploitation.