medium4.3
CVE-2018-15833
In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference (IDOR) via the Poll ID, leading to the ability of a single user to s…
Impact
In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference (IDOR) via the Poll ID, leading to the ability of a single user to select multiple Poll Options (e.g., vote for multiple items).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vanillaforums | Vanilla Forums | before 2.6.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://hackerone.com/reports/326434
- https://open.vanillaforums.com/discussion/36559
- https://twitter.com/viperbluff/status/1033067882941304832
- https://twitter.com/viperbluff/status/1033640333890834433
- https://hackerone.com/reports/326434
- https://open.vanillaforums.com/discussion/36559
- https://twitter.com/viperbluff/status/1033067882941304832
- https://twitter.com/viperbluff/status/1033640333890834433