CVE-2025-65033

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an authorization flaw in the poll management feature allows any authenticated user to pause or resume any poll, regardless of ownership. The system only uses the public pollId to identify polls, and it does not verify whether the user performing the action is the poll owner. As a result, any user can disrupt polls created by others, leading to a loss of integrity and availability across the application. This issue has been patched in version 4.5.4.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/lukevella/rallly/releases/tag/v4.5.4	Release Notes
https://github.com/lukevella/rallly/security/advisories/GHSA-4p93-v53r-vch3	Exploit Vendor Advisory
https://github.com/lukevella/rallly/security/advisories/GHSA-4p93-v53r-vch3	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:rallly:rallly:*:*:*:*:*:*:*:*

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Rallly es una herramienta de código abierto de planificación y colaboración. Versiones anteriores a la versión 4.5.4, una falla de autorización en la función de gestión de encuestas permite a cualquier usuario autenticado pausar o reanudar cualquier encuesta, independientemente de la propiedad. El sistema solo utiliza el 'pollId' público para identificar encuestas y no verifica si el usuario que realiza la acción es el propietario de la encuesta. Como resultado, cualquier usuario puede interrumpir encuestas creadas por otros, lo que lleva a una pérdida de integridad y disponibilidad en toda la aplicación. Este problema ha sido parcheado en la versión 4.5.4.

Information

Published : 2025-11-19 18:15

Updated : 2026-10-18 20:10

NVD link : CVE-2025-65033

Mitre link : CVE-2025-65033

CVE.ORG link : CVE-2025-65033

JSON object : View

Products Affected

rallly

rallly

CWE

CWE-285

Improper Authorization

CWE-639

Authorization Bypass Through User-Controlled Key

{"id": "CVE-2025-65033", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-65033", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-11-19T20:03:41.039021Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "lukevella", "product": "rallly", "versions": [{"status": "affected", "version": "< 4.5.4"}]}]}], "published": "2025-11-19T18:15:51.107", "references": [{"url": "https://github.com/lukevella/rallly/releases/tag/v4.5.4", "tags": ["Release Notes"], "source": "security-advisories@github.com"}, {"url": "https://github.com/lukevella/rallly/security/advisories/GHSA-4p93-v53r-vch3", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/lukevella/rallly/security/advisories/GHSA-4p93-v53r-vch3", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-285"}, {"lang": "en", "value": "CWE-639"}]}], "descriptions": [{"lang": "en", "value": "Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an authorization flaw in the poll management feature allows any authenticated user to pause or resume any poll, regardless of ownership. The system only uses the public pollId to identify polls, and it does not verify whether the user performing the action is the poll owner. As a result, any user can disrupt polls created by others, leading to a loss of integrity and availability across the application. This issue has been patched in version 4.5.4."}, {"lang": "es", "value": "Rallly es una herramienta de c\u00f3digo abierto de planificaci\u00f3n y colaboraci\u00f3n. Versiones anteriores a la versi\u00f3n 4.5.4, una falla de autorizaci\u00f3n en la funci\u00f3n de gesti\u00f3n de encuestas permite a cualquier usuario autenticado pausar o reanudar cualquier encuesta, independientemente de la propiedad. El sistema solo utiliza el 'pollId' p\u00fablico para identificar encuestas y no verifica si el usuario que realiza la acci\u00f3n es el propietario de la encuesta. Como resultado, cualquier usuario puede interrumpir encuestas creadas por otros, lo que lleva a una p\u00e9rdida de integridad y disponibilidad en toda la aplicaci\u00f3n. Este problema ha sido parcheado en la versi\u00f3n 4.5.4."}], "lastModified": "2026-10-18T20:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rallly:rallly:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05349176-CA4D-4360-A7E1-0EA2D8C24E7E", "versionEndExcluding": "4.5.4"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}