CVE-2025-55734

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, the code checks if the userRole is "admin" only when visiting the /admin page, but not when visiting its subroutes. Specifically, only the file routes/adminPanel.py checks the user role when a user is trying to access the admin page,...

CVE-2025-57761

creationtimestamp| type| source ---|---|--- 2025-08-21 18:28:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwwl3dwtyh26 2025-08-22 04:32:17+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwxmsgrcvp2a...

CVE-2025-54388

creationtimestamp| type| source ---|---|--- 2025-08-21 13:58:38+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lww3y62dw22e 2025-08-21 14:45:48+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lww6mjc5ck2e 2026-01-23 10:35:52+00:00| seen|...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization due to improper validating access controls at time of access. An attacker can gain unauthorized access to thread content by leveraging AI-generated posts. Remediation Upgrade...

GHSA-PWVR-GRQG-7VP2 Mattermost Lack of Access Control Validation

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

Mattermost Lack of Access Control Validation

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

CVE-2025-8895

creationtimestamp| type| source ---|---|--- 2025-08-21 09:01:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwvlex46pg2p 2025-08-21 10:29:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lwvqc2fnid2p...

CVE-2025-49810

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

CVE-2025-7390

creationtimestamp| type| source ---|---|--- 2025-08-21 07:31:51+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lwvgelavaf24 2025-08-21 08:13:58+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lwvipq6qpk22 2025-08-21 10:13:21+00:00| seen|...

CVE-2025-49810 Thread summarization allows persistent access to channel

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

CVE-2025-49810

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

CVE-2025-49810 Thread summarization allows persistent access to channel

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

CVE-2025-49810

Summary: Mattermost Server 10.5.x

CVE-2025-49810 Thread summarization allows persistent access to channel

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

CVE-2025-49810: Incorrect Authorization

Mattermost versions 10.5.x = 10.5.8 fail to validate access controls at time of access which allows user to read a thread via AI posts...

CVE-2025-38011

creationtimestamp| type| source ---|---|--- 2025-08-20 22:16:19+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lwuhdazkdr2i 2025-08-20 22:16:22+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lwuhdcvcps2l 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-54988

creationtimestamp| type| source ---|---|--- 2025-08-20 17:48:13+00:00| seen| https://seclists.org/oss-sec/2025/q3/129 2025-08-20 17:50:44+00:00| seen| https://seclists.org/oss-sec/2025/q3/130 2025-08-20 20:54:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwucq4fdbu2h...

CVE-2025-9132

creationtimestamp| type| source ---|---|--- 2025-08-20 08:59:25+00:00| seen| https://threatintel.cc/2025/08/20/google-fixed-chrome-flaw-found.html 2025-08-20 09:24:36+00:00| seen| https://bsky.app/profile/infosecindustry.bsky.social/post/3lwt47bzjts2s 2025-08-20 09:57:42+00:00| seen|...

CVE-2023-52757

creationtimestamp| type| source ---|---|--- 2025-08-19 20:41:40+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lwrrl3b5yn23 2025-08-19 20:41:42+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lwrrl5cgxq2u 2025-08-19 20:41:57+00:00| seen|...

CVE-2025-55734

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, the code checks if the userRole is "admin" only when visiting the /admin page, but not when visiting its subroutes. Specifically, only the file routes/adminPanel.py checks the user role when a user is trying to access the admin page,...