CVE-2025-65020

Rallly Has Unauthorized Poll Duplication via Insecure Direct Object Reference (IDOR)

CVSS 6.5 MEDIUMEPSS 0.2%CWE-285 CWE-639 CWE-862

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 6.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

19 nov 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference (IDOR) vulnerability in the poll duplication endpoint (/api/trpc/polls.duplicate) allows any authenticated user to duplicate polls they do not own by modifying the pollId parameter. This effectively bypasses access control and lets unauthorized users clone private or administrative polls. This issue has been patched in version 4.5.4.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Productos afectados

lukevella · rallly

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/lukevella/rallly/releases/tag/v4.5.4 https://github.com/lukevella/rallly/security/advisories/GHSA-44w7-pf32-gv5m