CVE-2024-56295
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 15, 2025
CWE ID 862
Summary
CVE-2024-56295 is a Missing Authorization vulnerability affecting Poll Maker from versions 5.5.6 and earlier. This issue arises due to Poll Maker's failure to enforce proper access control security levels, potentially allowing unauthorized exploitation. Exploiters can take advantage of this vulnerability to gain unauthorized access to poll features, posing a significant risk to data privacy and security. Organizations using Poll Maker are strongly urged to update to the latest version or implement suitable workarounds to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.