fsinfuhh bitpoll vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 6.9CVE-2026-125369EPSS 0.3%2026-11-10

   Bitpoll through 0.11.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read votes and comments from other polls via unscoped object lookups in views.py. Attackers can pair any public poll…