Flaskblog Security Vulnerabilities and Issues — Flaskblog CVE List

Lucene search

DogukanurkerFlaskblog

2 matches found

CVE•added 2025/04/21 6:15 p.m.•38 views

CVE-2025-28104

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.

9.1CVSS6.7AI score0.00065EPSS

CVE•added 2025/08/19 7:15 p.m.•7 views

CVE-2025-55736

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving its relative privileges (e.g. delete users, posts, comments etc.). The problem is in the routes/adminPanelUsers file.

9.3CVSS7.2AI score0.00053EPSS