Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: flaskbb Clear all filters
TI-2026-18194 CVE-2026-22659

FlaskBB Authorization Bypass via Topic ID Manipulation

Priority HIGH 65

FlaskBB through 2.2.0, fixed in commit acc88cf, contains an authorization bypass vulnerability that allows authenticated moderators to perform unauthorized actions on topics in forums they do not control by submitting cr…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00525 Published 2026-07-10 Fixed CWE-863
TI-2026-18195 CVE-2026-22660

FlaskBB Logic Flaw Authorization Group Deletion via Bulk AJAX Endpoint

Priority HIGH 72

FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete pr…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00606 Published 2026-07-10 Fixed CWE-697