CVE-2025-59826highCWE-862

CVE-2025-59826: falha de alta gravidade em FlagForgeCTF flagForge

FlagForgeCTF Vulnerable to Unauthorized Problem Creation

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar flagForge

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.6epss 0.2%
Flag Forge is a Capture The Flag (CTF) platform. In version 2.1.0, non-admin users can create arbitrary challenges, potentially introducing malicious, incorrect, or misleading content. This issue has been patched in version 2.2.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Produtos afetados
FlagForgeCTF · flagForge
CVEs relacionadas — FlagForgeCTF flagForge

No mesmo produto, das mais perigosas para as menos.

CVE-2025-61777CRITICALFlagForge Allows Unauthenticated Badge Template API AccessEPSS 0.5%CVE-2025-59843MEDIUMFlagForgeCTF Exposes User Emails via Public /api/user/[username] APIEPSS 0.4%CVE-2025-59841CRITICALFlagForgeCTF's Improper Session Handling Allows Access After LogoutEPSS 0.4%CVE-2025-59827HIGHFlagForgeCTF is Missing Authorization in main-v2EPSS 0.4%CVE-2025-59932HIGHFlagForgeCTF Unauthenticated Resource Modification/DeletionEPSS 0.4%CVE-2025-59833HIGHFlagForgeCTF Hint Exposure via APIEPSS 0.3%