CVE-2025-65034 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization vulnerability allows any authenticated user to reo…
High CVSS: 8.1

CVE-2025-65034

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization vulnerability allows any authenticated user to reopen finalized polls belonging to other users by manipulating the pollId parameter. This can disrupt events managed by other users and compromise both availability and integrity of poll data. This issue has been patched in version 4.5.4.
Vendor
Rallly
Product
Rallly
CWE
CWE-639
Yayın Tarihi
2025-11-19 18:15:51
Güncelleme
2025-11-24 18:02:45
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-639 Rallly HIGH Rallly 2025

Referanslar

https://github.com/lukevella/rallly/releases/tag/v4.5.4 https://github.com/lukevella/rallly/security/advisories/GHSA-5fp2-pv2j-rqpc https://github.com/lukevella/rallly/security/advisories/GHSA-5fp2-pv2j-rqpc