{"action":"Upgrade decidim-admin to 0.27.7 or later.","affected":[{"fixed":"0.27.7","introduced":"0"},{"fixed":"0.28.2","introduced":"0.28.0"}],"component":"decidim-admin","cve_ids":["CVE-2024-32034"],"ecosystem":"RubyGems","epss":0.00374,"exploited":false,"fixed_versions":["0.27.7","0.28.2"],"ghsa_id":"GHSA-rx9f-5ggv-5rh6","id":"tcs_01M5KENCR9GQ4ARCS8Z3NW7924","modified_at":"2024-09-17T22:34:09.207091Z","published_at":"2024-09-16T17:17:20Z","references":["https://osv.dev/vulnerability/GHSA-rx9f-5ggv-5rh6","https://github.com/decidim/decidim/security/advisories/GHSA-rx9f-5ggv-5rh6","https://nvd.nist.gov/vuln/detail/CVE-2024-32034","https://github.com/decidim/decidim/commit/23fc8d702a4976727f78617f5e42353d67931645","https://github.com/decidim/decidim/commit/9d79f09a2d38c87feb28725670d6cc1f55c22072","https://github.com/decidim/decidim/commit/e494235d559be13dd1f8694345e6f6bba762d1c0","https://github.com/decidim/decidim/commit/ff755e23814aeb56e9089fc08006a5d3faee47b6","https://github.com/decidim/decidim","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/decidim-admin/CVE-2024-32034.yml"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-rx9f-5ggv-5rh6","url":"https://osv.dev/vulnerability/GHSA-rx9f-5ggv-5rh6"}],"summary":"Decidim::Admin vulnerable to cross-site scripting (XSS) in the admin activity log"}