CVE-2025-13796

Name of the Vulnerable Software and Affected Versions deco-cx apps versions up to 0.120.1

Description A security issue exists in deco-cx apps. Manipulation of the url argument within the AnalyticsScript function, located in the website/loaders/analyticsScript.ts file of the Parameter Handler component, can lead to server-side request forgery. This attack can be carried out remotely. The exploit for this issue has been publicly disclosed.

Recommendations Upgrade to version 0.120.2 to address this issue.