Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-64773 State: PUBLISHED Published: 2025-11-11T15:23:19.653Z Last Updated: 2025-11-11T15:23:19.653Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: JetBrains Products: YouTrack Problem Types: CWE-362 Description: In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit References: - https://www.jetbrains.com/privacy-security/issues-fixed/
CVE ID: CVE-2025-64984 State: PUBLISHED Published: 2025-11-20T06:53:39.628Z Last Updated: 2025-11-20T15:42:14.162Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Kaspersky Products: Kaspersky Endpoint Security, Kaspersky Industrial CyberSecurity for Linux Nodes Problem Types: CWE-79 Description: Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), Kaspersky Industrial CyberSecurity for Linux Nodes (any version with anti-virus databases prior to 18.11.2025), and Kaspersky Endpoint Security for Mac (12.0.0.325, 12.1.0.553, and 12.2.0.694 with anti-virus databases prior to 18
), and Kaspersky Endpoint Security for Mac (12.0.0.325, 12.1.0.553, and 12.2.0.694 with anti-virus databases prior to 18.11.2025) that could have allowed a reflected XSS attack to be carried out by an attacker using phishing techniques. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.kaspersky.com/vulnerability/list-of-advisories/12430#181125
CVE ID: CVE-2025-64996 State: PUBLISHED Published: 2025-11-18T15:10:53.398Z Last Updated: 2025-11-18T21:23:15.114Z Vendors: Checkmk GmbH Products: Checkmk Problem Types: CWE-732 Description: In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mk_inotify plugin creates world-readable and writable files, allowing any local user on the system to read the plugin's output and manipulate it, potentially leading to unauthorized access to or modification of monitoring data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://checkmk.com/werk/18570
CVE ID: CVE-2025-65001 State: PUBLISHED Published: 2025-11-12T00:00:00.000Z Last Updated: 2025-11-13T15:50:02.915Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Fujitsu Products: fbiosdrv.sys Problem Types: CWE-787 Description: Fujitsu fbiosdrv.sys before 2.5.0.0 allows an attacker to potentially affect system confidentiality, integrity, and availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-FCCL-2025-072319-Security-Notice.pdf - https://hexaplex.ai
CVE ID: CVE-2025-65002 State: PUBLISHED Published: 2025-11-12T00:00:00.000Z Last Updated: 2025-11-18T14:32:28.920Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Fujitsu / Fsas Technologies Products: iRMC Problem Types: CWE-863 Description: Fujitsu / Fsas Technologies iRMC S6 on M5 before 1.37S mishandles Redfish/WebUI access if the length of a username is exactly 16 characters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.ts.fujitsu.com/ProductSecurity/content/FsasTech-PSIRT-FTI-ISS-2025-082610-Security-Notice.pdf
CVE ID: CVE-2025-65012 State: PUBLISHED Published: 2025-11-18T22:44:11.989Z Last Updated: 2025-11-19T17:06:24.803Z Vendors: getkirby Products: kirby Problem Types: CWE-79 Description: Kirby is an open-source content management system. From versions 5.0.0 to 5.1.3, attackers could change the title of any page or the name of any user to a malicious string. Then they could modify any content field of the same model without saving, making the model a candidate for display in the "Changes" dialog. If another authenticated user subsequently opened the dialog in their Panel, the malicious code would be executed. This vulnerability affects all Kirby 5 sites that might have potential attackers in the
alicious code would be executed. This vulnerability affects all Kirby 5 sites that might have potential attackers in the group of authenticated Panel users or that allow external visitors to update page titles or usernames. The attack requires user interaction by another Panel user and cannot be automated. This issue has been patched in version 5.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/getkirby/kirby/security/advisories/GHSA-84hf-8gh5-575j - https://github.com/getkirby/kirby/releases/tag/5.1.4
CVE ID: CVE-2025-65013 State: PUBLISHED Published: 2025-11-18T23:01:21.659Z Last Updated: 2025-11-19T14:46:51.743Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N) Vendors: librenms Products: librenms Problem Types: CWE-79 Description: LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a reflected cross-site scripting (XSS) vulnerability was identified in the LibreNMS application at the /maps/nodeimage endpoint. The Image Name parameter is reflected in the HTTP response without proper output encoding or sanitization, allowing an attacker to craft a URL that, when visited by a victim, causes arbitrary JavaScript exec
ng or sanitization, allowing an attacker to craft a URL that, when visited by a victim, causes arbitrary JavaScript execution in the victim’s browser. This issue has been patched in version 25.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/security/advisories/GHSA-j8cq-7f6p-256x
CVE ID: CVE-2025-65014 State: PUBLISHED Published: 2025-11-18T23:01:40.005Z Last Updated: 2025-11-19T14:53:16.804Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: librenms Products: librenms Problem Types: CWE-521 Description: LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a weak password policy vulnerability was identified in the user management functionality of the LibreNMS application. This vulnerability allows administrators to create accounts with extremely weak and predictable passwords, such as 12345678. This exposes the platform to brute-force and credential stuffing attacks. This issue has been p
words, such as 12345678. This exposes the platform to brute-force and credential stuffing attacks. This issue has been patched in version 25.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/librenms/librenms/security/advisories/GHSA-5mrf-j8v6-f45g
CVE ID: CVE-2025-65015 State: PUBLISHED Published: 2025-11-18T23:07:44.328Z Last Updated: 2025-11-19T17:12:04.336Z Vendors: authlib Products: joserfc Problem Types: CWE-770 Description: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. In versions from 1.3.3 to before 1.3.5 and from 1.4.0 to before 1.4.2, the ExceededSizeError exception messages are embedded with non-decoded JWT token parts and may cause Python logging to record an arbitrarily large, forged JWT payload. In situations where a misconfigured — or entirely absent — production-grade web server sits in front of a Python web application, an attacker may be ab
ured — or entirely absent — production-grade web server sits in front of a Python web application, an attacker may be able to send arbitrarily large bearer tokens in the HTTP request headers. When this occurs, Python logging or diagnostic tools (e.g., Sentry) may end up processing extremely large log messages containing the full JWT header during the joserfc.jwt.decode() operation. The same behavior also appears when validating claims and signature payload sizes, as the library raises joserfc.errors.ExceededSizeError() with the full payload embedded in the exception message. Since the payload is already fully loaded into memory at this stage, the library cannot prevent or reject it. This iss
. Since the payload is already fully loaded into memory at this stage, the library cannot prevent or reject it. This issue has been patched in versions 1.3.5 and 1.4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/authlib/joserfc/security/advisories/GHSA-frfh-8v73-gjg4 - https://github.com/authlib/joserfc/commit/63932f169d924caffafa761af2122b82059017f7 - https://github.com/authlib/joserfc/commit/673c8743fd0605b0e1de6452be6cba75f44e466b - https://github.com/authlib/joserfc/releases/tag/1.3.5 - https://github.com/authlib/joserfc/releases/tag/1.4.2
CVE ID: CVE-2025-65018 State: PUBLISHED Published: 2025-11-24T23:50:18.294Z Last Updated: 2025-11-24T23:50:18.294Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: pnggroup Products: libpng Problem Types: CWE-787, CWE-122 Description: LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds
ed PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51. References: - https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g - https://github.com/pnggroup/libpng/issues/755 - https://github.com/pnggroup/libpng/pull/757 - https://github.com/pnggroup/libpng/commit/16b5e3823918840aae65c0a6da57c78a5a496a4d - https://github.com/pnggroup/libpng/commit/218612ddd6b17944e21eda56caf8b4bf7779d1ea
CVE ID: CVE-2025-65019 State: PUBLISHED Published: 2025-11-19T16:40:47.826Z Last Updated: 2025-11-19T21:05:19.247Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: withastro Products: astro Problem Types: CWE-79 Description: Astro is a web framework. Prior to version 5.15.9, when using Astro's Cloudflare adapter (@astrojs/cloudflare) with output: 'server', the image optimization endpoint (/_image) contains a critical vulnerability in the isRemoteAllowed() function that unconditionally allows data: protocol URLs. This enables Cross-Site Scripting (XSS) attacks through malicious SVG payloads, bypassing domain restrictions and Content Security Policy protections
ting (XSS) attacks through malicious SVG payloads, bypassing domain restrictions and Content Security Policy protections. This issue has been patched in version 5.15.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/withastro/astro/security/advisories/GHSA-fvmw-cj7j-j39q - https://github.com/withastro/astro/commit/9e9c528191b6f5e06db9daf6ad26b8f68016e533
CVE ID: CVE-2025-65020 State: PUBLISHED Published: 2025-11-19T17:24:12.583Z Last Updated: 2025-11-19T21:12:41.130Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: lukevella Products: rallly Problem Types: CWE-285, CWE-639, CWE-862 Description: Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference (IDOR) vulnerability in the poll duplication endpoint (/api/trpc/polls.duplicate) allows any authenticated user to duplicate polls they do not own by modifying the pollId parameter. This effectively bypasses access control and lets unauthorized users clone private or administrative polls. This issue h
This effectively bypasses access control and lets unauthorized users clone private or administrative polls. This issue has been patched in version 4.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lukevella/rallly/security/advisories/GHSA-44w7-pf32-gv5m - https://github.com/lukevella/rallly/releases/tag/v4.5.4
CVE ID: CVE-2025-65021 State: PUBLISHED Published: 2025-11-19T17:24:31.084Z Last Updated: 2025-11-19T21:13:27.620Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H) Vendors: lukevella Products: rallly Problem Types: CWE-285, CWE-862, CWE-639 Description: Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference (IDOR) vulnerability exists in the poll finalization feature of the application. Any authenticated user can finalize a poll they do not own by manipulating the pollId parameter in the request. This allows unauthorized users to finalize other users’ polls and convert them into events without proper a
the request. This allows unauthorized users to finalize other users’ polls and convert them into events without proper authorization checks, potentially disrupting user workflows and causing data integrity and availability issues. This issue has been patched in version 4.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lukevella/rallly/security/advisories/GHSA-x7w2-g548-4qg8 - https://github.com/lukevella/rallly/releases/tag/v4.5.4
CVE ID: CVE-2025-65022 State: PUBLISHED Published: 2025-11-19T16:02:13.336Z Last Updated: 2025-11-19T16:36:31.318Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: portabilis Products: i-educar Problem Types: CWE-89 Description: i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/agenda.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands against the application's database. This vulnerability is caused by the improper handling of the cod_agenda request parameter, which is directly concatenated
is vulnerability is caused by the improper handling of the cod_agenda request parameter, which is directly concatenated into multiple SQL queries without proper sanitization. This issue has been patched in commit b473f92. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/portabilis/i-educar/security/advisories/GHSA-4hrj-5gwx-r4w4 - https://github.com/portabilis/i-educar/commit/b473f92b5326f45d7bce2de93a5381bed7ca8ac7
CVE ID: CVE-2025-65023 State: PUBLISHED Published: 2025-11-19T16:02:10.539Z Last Updated: 2025-11-19T18:51:24.399Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: portabilis Products: i-educar Problem Types: CWE-89 Description: i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/funcionario_vinculo_cad.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands against the application's database. This vulnerability is caused by the improper handling of the cod_funcionario_vinculo GET parameter, which
on's database. This vulnerability is caused by the improper handling of the cod_funcionario_vinculo GET parameter, which is directly concatenated into an SQL query without proper sanitization. This issue has been patched in commit a00dfa3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/portabilis/i-educar/security/advisories/GHSA-8rv6-x8h9-fjfc - https://github.com/portabilis/i-educar/commit/a00dfa3f129bc84e27873aa01cbd3f82e5b6c6c8
CVE ID: CVE-2025-65024 State: PUBLISHED Published: 2025-11-19T16:02:06.664Z Last Updated: 2025-11-24T20:26:41.251Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: portabilis Products: i-educar Problem Types: CWE-89 Description: i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/agenda_admin_cad.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands against the application's database. This vulnerability is caused by the improper handling of the cod_agenda GET parameter, which is directly concate
tabase. This vulnerability is caused by the improper handling of the cod_agenda GET parameter, which is directly concatenated into an SQL query without proper sanitization. This issue has been patched in commit 3e9763a. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/portabilis/i-educar/security/advisories/GHSA-6c8p-xqcv-rghx - https://github.com/portabilis/i-educar/commit/3e9763a561b328edaed21a7dc2e0dba0bbbc6e22
CVE ID: CVE-2025-65025 State: PUBLISHED Published: 2025-11-19T17:32:46.835Z Last Updated: 2025-11-20T14:09:44.277Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N) Vendors: esm-dev Products: esm.sh Problem Types: CWE-22 Description: esm.sh is a nobuild content delivery network(CDN) for modern web development. Prior to version 136, the esm.sh CDN service is vulnerable to path traversal during NPM package tarball extraction. An attacker can craft a malicious NPM package containing specially crafted file paths (e.g., package/../../tmp/evil.js). When esm.sh downloads and extracts this package, files may be written to arbitrary locations on the server, escaping the intended
h downloads and extracts this package, files may be written to arbitrary locations on the server, escaping the intended extraction directory. This issue has been patched in version 136. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/esm-dev/esm.sh/security/advisories/GHSA-h3mw-4f23-gwpw - https://github.com/esm-dev/esm.sh/commit/9d77b88c320733ff6689d938d85d246a3af9af16
CVE ID: CVE-2025-65026 State: PUBLISHED Published: 2025-11-19T17:33:11.469Z Last Updated: 2025-11-20T14:19:17.852Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: esm-dev Products: esm.sh Problem Types: CWE-94 Description: esm.sh is a nobuild content delivery network(CDN) for modern web development. Prior to version 136, The esm.sh CDN service contains a Template Literal Injection vulnerability (CWE-94) in its CSS-to-JavaScript module conversion feature. When a CSS file is requested with the ?module query parameter, esm.sh converts it to a JavaScript module by embedding the CSS content directly into a template literal without proper sanitization. An attacker
JavaScript module by embedding the CSS content directly into a template literal without proper sanitization. An attacker can inject malicious JavaScript code using ${...} expressions within CSS files, which will execute when the module is imported by victim applications. This enables Cross-Site Scripting (XSS) in browsers and Remote Code Execution (RCE) in Electron applications. This issue has been patched in version 136. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/esm-dev/esm.sh/security/advisories/GHSA-hcpf-qv9m-vfgp - https://github.com/esm-dev/esm.sh/commit/87d2f6497574bf4448641a5527a3ac2beba5fd6c
CVE ID: CVE-2025-65028 State: PUBLISHED Published: 2025-11-19T17:23:57.215Z Last Updated: 2025-11-19T21:11:46.399Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: lukevella Products: rallly Problem Types: CWE-285, CWE-639, CWE-862 Description: Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an insecure direct object reference (IDOR) vulnerability allows any authenticated user to modify other participants’ votes in polls without authorization. The backend relies solely on the participantId parameter to identify which votes to update, without verifying ownership or poll permissions. This allows an attacker to alter poll resu
ntify which votes to update, without verifying ownership or poll permissions. This allows an attacker to alter poll results in their favor, directly compromising data integrity. This issue has been patched in version 4.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lukevella/rallly/security/advisories/GHSA-pchc-v5hg-f5gp - https://github.com/lukevella/rallly/releases/tag/v4.5.4
CVE ID: CVE-2025-65029 State: PUBLISHED Published: 2025-11-19T17:24:45.509Z Last Updated: 2025-11-19T21:14:09.593Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: lukevella Products: rallly Problem Types: CWE-285, CWE-639, CWE-862 Description: Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an insecure direct object reference (IDOR) vulnerability allows any authenticated user to delete arbitrary participants from polls without ownership verification. The endpoint relies solely on a participant ID to authorize deletions, enabling attackers to remove other users (including poll owners) from polls. This impacts the integrity an
ze deletions, enabling attackers to remove other users (including poll owners) from polls. This impacts the integrity and availability of poll participation data. This issue has been patched in version 4.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lukevella/rallly/security/advisories/GHSA-f8jc-6746-ww95 - https://github.com/lukevella/rallly/releases/tag/v4.5.4
CVE ID: CVE-2025-65030 State: PUBLISHED Published: 2025-11-19T17:25:16.065Z Last Updated: 2025-11-19T18:37:52.241Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: lukevella Products: rallly Problem Types: CWE-285, CWE-639 Description: Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an authorization flaw in the comment deletion API allows any authenticated user to delete comments belonging to other users, including poll owners and administrators. The endpoint relies solely on the comment ID for deletion and does not validate whether the requesting user owns the comment or has permission to remove it. This issue has been patch
does not validate whether the requesting user owns the comment or has permission to remove it. This issue has been patched in version 4.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lukevella/rallly/security/advisories/GHSA-4j32-25f9-qgfm - https://github.com/lukevella/rallly/releases/tag/v4.5.4
CVE ID: CVE-2025-65031 State: PUBLISHED Published: 2025-11-19T17:25:49.058Z Last Updated: 2025-11-19T18:35:00.771Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: lukevella Products: rallly Problem Types: CWE-285, CWE-639 Description: Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization flaw in the comment creation endpoint allows authenticated users to impersonate any other user by altering the authorName field in the API request. This enables attackers to post comments under arbitrary usernames, including privileged ones such as administrators, potentially misleading other users and enabling phishing
ry usernames, including privileged ones such as administrators, potentially misleading other users and enabling phishing or social engineering attacks. This issue has been patched in version 4.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lukevella/rallly/security/advisories/GHSA-hhfc-6gq7-rrpm - https://github.com/lukevella/rallly/releases/tag/v4.5.4
CVE ID: CVE-2025-65032 State: PUBLISHED Published: 2025-11-19T17:26:09.648Z Last Updated: 2025-11-19T18:50:41.841Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: lukevella Products: rallly Problem Types: CWE-639 Description: Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference (IDOR) vulnerability allows any authenticated user to change the display names of other participants in polls without being an admin or the poll owner. By manipulating the participantId parameter in a rename request, an attacker can modify another user’s name, violating data integrity and potentially causing confusion