Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference (IDOR) via the Poll ID, leading to the ability of a single user to select multiple Poll Options (e.g., vote for multiple items).

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.