Lucene search
+L

CVE-2025-65020

🗓️ 19 Nov 2025 17:24:12Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov👁 31 Views🌐 WEB

IDOR in Rallly allowed authenticated users to duplicate polls they do not own via pollId; fixed in 4.5.4.

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
cnnvd
CNNVD
Rallly 安全漏洞
19 Nov 202500:00
cnnvd
cvelist
Cvelist
CVE-2025-65020 Rallly Has Unauthorized Poll Duplication via Insecure Direct Object Reference (IDOR)
19 Nov 202517:24
cvelist
euvd
EUVD
EUVD-2025-198224
19 Nov 202517:24
euvd
nvd
NVD
CVE-2025-65020
19 Nov 202518:15
nvd
ptsecurity
Positive Technologies
PT-2025-47501
19 Nov 202500:00
ptsecurity
redhatcve
RedhatCVE
CVE-2025-65020
20 Nov 202521:37
redhatcve
vulnrichment
Vulnrichment
CVE-2025-65020 Rallly Has Unauthorized Poll Duplication via Insecure Direct Object Reference (IDOR)
19 Nov 202517:24
vulnrichment
NVD
Vulners
Node
ralllyralllyRange<4.5.4
[
  {
    "vendor": "lukevella",
    "product": "rallly",
    "versions": [
      {
        "version": "< 4.5.4",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
pollIdrequest body/api/trpc/polls.duplicateInsecure Direct Object Reference on poll duplication endpoint allowing authenticated users to duplicate polls they do not own by manipulating pollIdCWE-639CWE-862CWE-285

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 09:55Current
6.3Medium risk
Vulners AI Score6.3
CVSS 3.16.5
EPSS0.00238
SSVC
31