CVE-2025-28104

The blogging application laskBlog v2.6.1 contains an improper access control vulnerability (CWE-284). Attackers can bypass security measures and access all usernames by providing a specially crafted input. While no specific patch version is listed, it is recommended to restrict access to sensitiv...