CVE-2026-45415 (decidim-verifications): Decidim - CSV census record endpoints improper authorization
21-Jul-2026 1
Originally appeared on RubySec.## Description A participant manager can access and modify the CSV census record admin forms. ## Impact Any participant admin can create, alter, or remove CSV census rows, which can corrupt verification data relied on by authorization workflows. ...
CVE-2026-45415 (decidim-verifications): Decidim - CSV census record endpoints improper authorization #ruby #rubydeveloper #rubyonrails #ruby #rubyonrails #programming #webdev #cve-2026-45415 #(decidim-verifications): #authorization #record https://www.rubyonrails.ba/link/cve-2026-45415-decidim-verifications-decidim-csv-census-record-endpoints-improper-authorization