CVE-2025-59932
FlagForgeCTF Unauthenticated Resource Modification/Deletion
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.6EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
27 sep 2025Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper authentication or authorization. This could have enabled unauthorized users to create, modify, or delete resources on the platform. The issue has been fixed in FlagForge version 2.3.1.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
Productos afectados
FlagForgeCTF · flagForge¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →