GamerPolls/gamerpolls.com

GamerPolls/gamerpolls.com

GitHubGitHub
GitHubgithub.com
gamerpolls.comgamerpolls.com
Releases0
Stars5
A polling site geared towards use by streamers on Twitch.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2018-10966↗
—7.5 HIGH

An issue was discovered in GamerPolls 0.4.6, related to config/environments/all.js and config/initializers/02_passport.js. An attacker can edit the Passport.js contents of the session cookie to contain the ID number of the account they wish to take over, and re-sign it using the hard coded secret.