CVE-2026-45378 (decidim-verifications): Decidim - Verification documents can be downloaded through reusable links
21-Jul-2026 1
Originally appeared on RubySec.## Description Scanned identity-document images provided by participants and shown in the verification admin workflow are exposed through signed `/rails/active_storage/disk/` URLs that can be fetched without any authenticated session. Anyone who ...
CVE-2026-45378 (decidim-verifications): Decidim - Verification documents can be downloaded through reusable links #ruby #rubydeveloper #rubyonrails #ruby #rubyonrails #programming #webdev #cve-2026-45378 #(decidim-verifications): https://www.rubyonrails.ba/link/cve-2026-45378-decidim-verifications-decidim-verification-documents-can-be-downloaded-through-reusable-links
