CVE-2025-55736

6.5MEDIUM

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving its relative privileges (e.g. delete users, posts, comments etc.). The problem

发布于: 8/19/2025更新于: 8/22/2025
在NVD查看在MITRE查看

描述

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving its relative privileges (e.g. delete users, posts, comments etc.). The problem is in the routes/adminPanelUsers file.

AI分析AI驱动

受影响产品

dogukanurkerflaskblog

参考资料