Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/11/20 9:36 p.m.•17 views

CVE-2025-65034

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization vulnerability allows any authenticated user to reopen finalized polls belonging to other users by manipulating the pollId parameter. This can disrupt events managed by other users and...

8.1CVSS6.7AI score0.00331EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/19 5:26 p.m.•14 views

EUVD-2025-198231

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization vulnerability allows any authenticated user to reopen finalized polls belonging to other users by manipulating the pollId parameter. This can disrupt events managed by other users and...

8.1CVSS6.2AI score0.00331EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/19 5:26 p.m.•36 views

CVE-2025-65034

CVE-2025-65034 affects Rallly prior to version 4.5.4. The vulnerability is an improper authorization that allows any authenticated user to reopen finalized polls owned by other users by manipulating the pollId parameter, potentially disrupting events and compromising availability and integrity of...

8.1CVSS5.8AI score0.00331EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/11/19 5:26 p.m.•36 views

CVE-2025-65034 Rallly Improper Authorization Allows Reopening of Any Finalized Poll via Public pollId

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization vulnerability allows any authenticated user to reopen finalized polls belonging to other users by manipulating the pollId parameter. This can disrupt events managed by other users and...

8.1CVSS0.00331EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/19 5:26 p.m.•9 views

CVE-2025-65034 Rallly Improper Authorization Allows Reopening of Any Finalized Poll via Public pollId

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization vulnerability allows any authenticated user to reopen finalized polls belonging to other users by manipulating the pollId parameter. This can disrupt events managed by other users and...

8.1CVSS5.8AI score0.00331EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/19 12:00 a.m.•27 views

PT-2025-47511

Name of the Vulnerable Software and Affected Versions Rallly versions prior to 4.5.4 Description An authorization issue exists in Rallly, a scheduling and collaboration tool. An authenticated user can manipulate the pollId parameter to reopen finalized polls owned by other users. This can disrupt...

8.1CVSS5.7AI score0.00331EPSS
SaveExploits1References10
Rows per page
Query Builder