Security Advisory

CVE-2018-15833

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-08-26 17:00:00

Last updated 2024-08-05 10:01:54

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference (IDOR) via the Poll ID, leading to the ability of a single user to select multiple Poll Options (e.g., vote for multiple items).

← Browse all CVEs View on cve.org ↗