CVE-2025-65017

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-65017
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-65017.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-65017
Aliases
Published
2026-02-03T15:05:24.738Z
Modified
2026-02-05T10:06:33.793497Z
Severity
  • 8.2 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N CVSS Calculator
Summary
Decidim's private data exports can lead to data leaks
Details

Decidim is a participatory democracy framework. In versions from 0.30.0 to before 0.30.4 and from 0.31.0.rc1 to before 0.31.0, the private data exports can lead to data leaks in case the UUID generation, causing collisions for the generated UUIDs. This issue has been patched in versions 0.30.4 and 0.31.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65017.json",
    "cwe_ids": [
        "CWE-200",
        "CWE-703"
    ]
}
References

Affected packages

Git / github.com/decidim/decidim

Affected ranges

Type
GIT
Repo
https://github.com/decidim/decidim
Events
Introduced
14e8bd5deb100766d8afaad0ba98f12fc5802e61
Fixed
d47201a6e34314e9b4deaa6f054b1c8f97874d6b

Affected versions

v0.*
v0.30.0
v0.30.1
v0.30.2
v0.30.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-65017.json"