Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Gamerpolls Subscribe
Filtered by product Gamerpolls
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-10966 1 Gamerpolls 1 Gamerpolls 2018-07-20 7.5 HIGH 7.3 HIGH
An issue was discovered in GamerPolls 0.4.6, related to config/environments/all.js and config/initializers/02_passport.js. An attacker can edit the Passport.js contents of the session cookie to contain the ID number of the account they wish to take over, and re-sign it using the hard coded secret.