bola-CVE-2023-27524

🗓️ 13 Sep 2026 05:24:30Reported by KitPloitType

kitploit🔗 kitploit.com👁 9 Views

BOLA in Flask API (CVE-2023-27524) allows unauthorized object access via ID manipulation.

Reporter	Title	Published	Views	Family All 65
GithubExploit	Exploit for Path Traversal in Oracle Weblogic_Server	5 Jun 202416:29	–	githubexploit
GithubExploit	Exploit for Missing Authorization in Myeventon Eventon	3 Jun 202414:21	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	25 Apr 202304:59	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	27 Apr 202307:31	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	4 May 202321:43	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	4 May 202321:43	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Phpmyfaq	11 May 202412:29	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	11 May 202412:29	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	27 Apr 202307:31	–	githubexploit
GithubExploit	Exploit for Insecure Default Initialization of Resource in Apache Superset	8 Sep 202306:15	–	githubexploit

13 Sep 2026 05:24Current

8.2High risk

Vulners AI Score8.2

CVSS 3.18.9 - 9.8

EPSS0.97405

SSVC

Flask API BOLA Improper Authorization Object ID Manipulation Unauthorized Access Horizontal Privilege Escalation