TI-2024-29064 CVE-2024-43415 · GHSA-cxwf-qc32-375f
Decidim-Awesome: SQL injection in AdminAccountability
Priority MEDIUM 42
An improper neutralization of special elements used in an SQL command in the papertrail/version- model of the decidim_awesome-module <= v0.11.1 (> 0.9.0) allows an authenticated admin user to manipulate sql queries to di…