Vulnerabilities

TI-2025-40553 CVE-2025-66027

Rallly Information Disclosure Vulnerability in Participant API Leaks Names and Emails Despite Pro Privacy Settings

MEDIUM 64

Rallly is an open-source scheduling and collaboration tool.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00377 Published 2025-11-29 Fixed in 4.5.6 CWE-200

TI-2025-40220 CVE-2025-65034

Rallly Improper Authorization Allows Reopening of Any Finalized Poll via Public pollId

HIGH 70

Rallly is an open-source scheduling and collaboration tool.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00355 Published 2025-11-19 Fixed in 4.5.4 CWE-639

TI-2025-40219 CVE-2025-65033

Rallly Broken Authorization: Any User Can Pause or Resume Any Poll via Poll ID Manipulation

HIGH 70

Rallly is an open-source scheduling and collaboration tool.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00355 Published 2025-11-19 Fixed in 4.5.4 CWE-285

TI-2025-40218 CVE-2025-65032

Rallly Has an IDOR Vulnerability in Participant Rename Function Allows Unauthorized Modification of Other Users’ Names

MEDIUM 62

Rallly is an open-source scheduling and collaboration tool.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00275 Published 2025-11-19 Fixed in 4.5.4 CWE-639

TI-2025-40217 CVE-2025-65031

Rallly Improper Authorization in Comment Endpoint Allows User Impersonation

MEDIUM 62

Rallly is an open-source scheduling and collaboration tool.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00271 Published 2025-11-19 Fixed in 4.5.4 CWE-285

TI-2025-40216 CVE-2025-65030

Rallly Improper Authorization in Comment Deletion Endpoint Allows Unauthorized Comment Removal

MEDIUM 64

Rallly is an open-source scheduling and collaboration tool.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00306 Published 2025-11-19 Fixed in 4.5.4 CWE-285

TI-2025-40215 CVE-2025-65029

Rallly Has an IDOR Vulnerability in Participant Deletion Endpoint Allows Unauthorized Removal of Poll Participants

HIGH 68

Rallly is an open-source scheduling and collaboration tool.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00355 Published 2025-11-19 Fixed in 4.5.4 CWE-285

TI-2025-40207 CVE-2025-65021

Rallly Has Unauthorized Poll Finalization via Insecure Direct Object Reference (IDOR)

HIGH 72

Rallly is an open-source scheduling and collaboration tool.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0041 Published 2025-11-19 Fixed in 4.5.4 CWE-285

TI-2025-40206 CVE-2025-65020

Rallly Has Unauthorized Poll Duplication via Insecure Direct Object Reference (IDOR)

MEDIUM 62

Rallly is an open-source scheduling and collaboration tool.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00261 Published 2025-11-19 Fixed in 4.5.4 CWE-285

TI-2025-40214 CVE-2025-65028

Rallly Has an IDOR Vulnerability in Vote Update Endpoint Allows Unauthorized Manipulation of Participant Votes

MEDIUM 62

Rallly is an open-source scheduling and collaboration tool.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00275 Published 2025-11-19 Fixed in 4.5.4 CWE-285

TI-2025-30246 CVE-2025-47781

Rallly Insufficient Password Login Token Entropy Leads to Account Takeover

HIGH 82

Rallly is an open-source scheduling and collaboration tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0063 Published 2025-05-14 No fix listed CWE-331

Vulnerabilities

Filters