漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Decidim vulnerable to data disclosure through the embed feature
Vulnerability Description
Decidim is a participatory democracy framework, written in Ruby on Rails, originally developed for the Barcelona City government online and offline participation website. If an attacker can infer the slug or URL of an unpublished or private resource, and this resource can be embbeded (such as a Participatory Process, an Assembly, a Proposal, a Result, etc), then some data of this resource could be accessed. This vulnerability is fixed in 0.27.6.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
信息暴露
Vulnerability Title
Decidim 安全漏洞
Vulnerability Description
Decidim是一个参与式民主框架，用 Ruby on Rails 编写。 Decidim 0.27.6之前版本存在安全漏洞，该漏洞源于如果攻击者可以推断出未发布或私有资源的slug或URL，则可以访问该资源的某些数据。
CVSS Information
N/A
Vulnerability Type
N/A