CVE-2025-28104

Published April 21st, 2025

View on NVD ↗

CVSS v3

9.1

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.

DogukanUrker/FlaskBlog

Simple blog app.

GitHub

192