Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gist.github.com/coleak2021/d5fea0f7d32a2de38130da089f4fb735 | Third Party Advisory |
| https://github.com/DogukanUrker/flaskBlog/issues/130 | Exploit Issue Tracking Third Party Advisory |
Configurations
History
28 May 2025, 15:49
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Dogukanurker
Dogukanurker flaskblog |
|
| References | () https://github.com/DogukanUrker/flaskBlog/issues/130 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://gist.github.com/coleak2021/d5fea0f7d32a2de38130da089f4fb735 - Third Party Advisory | |
| CPE | cpe:2.3:a:dogukanurker:flaskblog:2.6.1:*:*:*:*:*:*:* |
21 Apr 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-21 18:15
Updated : 2025-05-28 15:49
NVD link : CVE-2025-28104
Mitre link : CVE-2025-28104
JSON object : View
Products Affected
dogukanurker
- flaskblog
CWE
No CWE.