CVE-2025-55736

6.5MEDIUM

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving its relative privileges (e.g. delete users, posts, comments etc.). The problem

게시됨: 8/19/2025업데이트됨: 8/22/2025
NVD에서 보기MITRE에서 보기

설명

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving its relative privileges (e.g. delete users, posts, comments etc.). The problem is in the routes/adminPanelUsers file.

AI 분석AI 기반

영향받는 제품

dogukanurkerflaskblog

참조