DogukanUrker

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

DogukanUrker records in CISA KEV

No DogukanUrker vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flaskblog 10 records HIGH

Records

10 records

TI-2025-35157 CVE-2025-55736

flaskBlog allows arbitrary privilege escalation

HIGH 79

flaskBlog is a blog app built with Flask.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0027 Published 2025-08-19 No fix listed CWE-425

TI-2025-20720 CVE-2025-28104 · GHSA-rfhg-52gw-r6hv

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.

HIGH 72

Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00405 Published 2025-04-21 No fix listed CWE-284

TI-2025-35158 CVE-2025-55737

flaskBlog arbitrary comment delete

HIGH 70

flaskBlog is a blog app built with Flask.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00294 Published 2025-08-19 No fix listed CWE-639

TI-2025-35155 CVE-2025-55734

flaskBlo Authorization Bypass

HIGH 70

flaskBlog is a blog app built with Flask.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00374 Published 2025-08-19 No fix listed CWE-862

TI-2025-20717 CVE-2025-28101 · GHSA-mrgc-7pv6-7gc9

An arbitrary file deletion vulnerability in the /post/{postTitle} component of flaskBlog…

HIGH 68

An arbitrary file deletion vulnerability in the /post/{postTitle} component of flaskBlog v2.6.1 allows attackers to delete article titles created by other users via supplying a crafted POST request.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00219 Published 2025-04-17 No fix listed CWE-352

TI-2024-14987 CVE-2024-22414

User profile page vulnerable to Cross Site Scripting (XSS) in flaskBlog

MEDIUM 62

flaskBlog is a simple blog app built with Flask.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00409 Published 2024-01-17 No fix listed CWE-79

TI-2025-20718 CVE-2025-28102 · GHSA-743f-hxpg-f2rj

A cross-site scripting (XSS) vulnerability in flaskBlog v2.6.1 allows attackers to…

MEDIUM 60

A cross-site scripting (XSS) vulnerability in flaskBlog v2.6.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the postContent parameter at /createpost.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00248 Published 2025-04-21 No fix listed CWE-79

TI-2025-35156 CVE-2025-55735

flaskBlog Stored XSS Vulnerability

MEDIUM 57

flaskBlog is a blog app built with Flask.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00211 Published 2025-08-19 No fix listed CWE-79

TI-2025-33558 CVE-2025-53631

flaskBlog XSS Vulnerability in postContent

MEDIUM 57

flaskBlog is a blog app built with Flask.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00242 Published 2025-08-14 No fix listed CWE-79

TI-2025-20719 CVE-2025-28103 · GHSA-87v4-c5h4-88xg

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.

LOW 28

Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00225 Published 2025-04-21 No fix listed CWE-862

Open these records in search →

Critical	2
High	0
Medium	8
Low	0
No CVSS	0