by Kastro
Paper/Archive/CVE-2025-55736

CVE-2025-55736

DogukanUrker FlaskBlog — flaskBlog allows arbitrary privilege escalation

EPSS 0.3%public exploitCVSS 9.3
critical.is priorityof 100
42
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 19.3.193 × 203.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving its relative privileges (e.g. delete users, posts, comments etc.). The problem is in the routes/adminPanelUsers file.

Affected

ProductAffectedFixed inSource
FlaskBlog<= 2.8.0–CNA

Scores by source

GitHub_M (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refgithub.com/DogukanUrker/FlaskBlog/security/advisories/GHSA-6q83-vfmq-wf72