CVE-2025-53631

概要

参考情報

• DogukanUrker/flaskBlog security advisory · Vendor Advisory

flaskblog のその他の脆弱性

• CVE-2025-55737中 6.5flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, when deleting a comment, there's no validation of the ownership of the comme…
• CVE-2025-55736中 6.5flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving its relative privil…
• CVE-2025-55735中 5.4flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, when creating a post, there's no validation of the content of the post store…
• CVE-2025-55734中 6.5flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, the code checks if the userRole is "admin" only when visiting the /admin pag…
• CVE-2025-28104緊急 9.1Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.