Skip to content
OpenAdvisories

Vendor

lukevella

13 known vulnerabilities.

Products

rallly 13
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2025-65021

    Rallly Has Unauthorized Poll Finalization via Insecure Direct Object Reference (IDOR)

    Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference (IDOR) vulnerability exists in the poll finalization feature of the application. Any authenticated user can finalize a poll they do not own…

    lukevella rallly
  • Critical 9.8
    CVE-2025-47781

    Rallly Insufficient Password Login Token Entropy Leads to Account Takeover

    Rallly is an open-source scheduling and collaboration tool. Versions up to and including 3.22.1 of the application features token based authentication. When a user attempts to login to the application, they insert their email and a 6 digit code is sent to the…

    lukevella rallly