Rallly

11 CVEs across 1 Rallly products. Browse Rallly vulnerabilities, severities, and proof-of-concept exploits.

Rallly products with known CVEs

ProductCVEs
Rallly11
Rallly CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-66027Medium6.52025-11-29Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.6, an information disclosure vulnerability exposes participant details, includ…
CVE-2025-65034High8.12025-11-19Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization vulnerability allows any authenticated user to re…
CVE-2025-65033High8.12025-11-19Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an authorization flaw in the poll management feature allows any authenticat…
CVE-2025-65032Medium6.52025-11-19Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference (IDOR) vulnerability allows any authent…
CVE-2025-65031Medium6.52025-11-19Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an improper authorization flaw in the comment creation endpoint allows auth…
CVE-2025-65030High7.12025-11-19Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an authorization flaw in the comment deletion API allows any authenticated…
CVE-2025-65029High8.12025-11-19Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an insecure direct object reference (IDOR) vulnerability allows any authent…
CVE-2025-65028Medium6.52025-11-19Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an insecure direct object reference (IDOR) vulnerability allows any authent…
CVE-2025-65021Critical9.12025-11-19Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference (IDOR) vulnerability exists in the poll…
CVE-2025-65020Medium6.52025-11-19Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference (IDOR) vulnerability in the poll duplic…
CVE-2025-47781Critical9.82025-05-14Rallly is an open-source scheduling and collaboration tool. Versions up to and including 3.22.1 of the application features token based authentication. When a…