CVE-2025-28103

Published April 21st, 2025

View on NVD ↗

CVSS v3

6.4

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.

DogukanUrker/FlaskBlog

Simple blog app.

GitHub

192