CVE-2025-28104

Mô tả

Tham khảo

• gist.github.com/coleak2021/d5fea0f7d32a2de38130da089f4fb735 · Third Party Advisory
• DogukanUrker/flaskBlog · Exploit

Lỗ hổng khác của flaskblog

• CVE-2025-55737TRUNG BÌNH 6.5flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, when deleting a comment, there's no validation of the ownership of the comme…
• CVE-2025-55736TRUNG BÌNH 6.5flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving its relative privil…
• CVE-2025-55735TRUNG BÌNH 5.4flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, when creating a post, there's no validation of the content of the post store…
• CVE-2025-55734TRUNG BÌNH 6.5flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, the code checks if the userRole is "admin" only when visiting the /admin pag…
• CVE-2025-53631TRUNG BÌNH 5.4flaskBlog is a blog app built with Flask. In versions 2.8.1 and prior, improper sanitization of postContent when submitting POST requests to…