{"action":"Upgrade decidim-templates to 0.27.5 or later.","affected":[{"fixed":"0.27.5","introduced":"0.23.0"}],"component":"decidim-templates","cve_ids":["CVE-2023-47635"],"ecosystem":"RubyGems","epss":0.00313,"exploited":false,"fixed_versions":["0.27.5"],"ghsa_id":"GHSA-f3qm-vfc3-jg6v","id":"tcs_01M5KEJXJW8GEN7ZWTCT9VX51Y","modified_at":"2026-09-10T03:50:06.234153964Z","published_at":"2024-02-20T18:03:12Z","references":["https://osv.dev/vulnerability/GHSA-f3qm-vfc3-jg6v","https://github.com/decidim/decidim/security/advisories/GHSA-f3qm-vfc3-jg6v","https://nvd.nist.gov/vuln/detail/CVE-2023-47635","https://github.com/decidim/decidim/pull/11743","https://github.com/decidim/decidim/pull/6247","https://github.com/decidim/decidim/commit/5542227be66e3b6d7530f5b536069bce09376660","https://github.com/decidim/decidim/commit/57a4b467787448307b5d9b01ce6e2c8502e121ac","https://github.com/decidim/decidim","https://github.com/decidim/decidim/blob/3187bdfd40ea1c57c2c12512b09a7fec0b2bed08/decidim-templates/app/controllers/decidim/templates/admin/questionnaire_templates_controller.rb#L11","https://github.com/decidim/decidim/releases/tag/v0.27.5","https://github.com/decidim/decidim/releases/tag/v0.28.0"],"severity":{"label":"medium","score":4.5},"sources":[{"source":"osv","source_id":"GHSA-f3qm-vfc3-jg6v","url":"https://osv.dev/vulnerability/GHSA-f3qm-vfc3-jg6v"}],"summary":"Possible CSRF attack at questionnaire templates preview"}