Cisco Slido Insecure Direct Object Reference Vulnerability

A vulnerability exists in the REST API of Cisco Slido, allowing authenticated, remote attackers to access the social profile data of other users or manipulate quiz and poll results. This issue arises from an insecure direct object reference, enabling attackers to send crafted requests to the vulnerable API endpoint. Exploitation could lead to unauthorized access to user social profiles or interference with quiz and poll outcomes.

Impact

Exploitation of this vulnerability could result in unauthorized access to social profile data of users or manipulation of quiz and poll results.