PT-2025-39216 · Flagforge · Flagforge

Aryan4859 · Publicado 2025-09-23 · Atualizado 2025-10-08 · CVE-2025-59826

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions Flag Forge versions prior to 2.2.0

Description Flag Forge is a Capture The Flag (CTF) platform. Non-admin users are able to create arbitrary challenges, which could lead to the introduction of malicious, incorrect, or misleading content.

Recommendations Update to version 2.2.0 or later.

Exploit

Correção

LPE

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2025-59826

GHSA-Q7PG-QCHV-3PC5

Produtos afetados

Flagforge

Referências · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59826.json · Exploit
• https://github.com/FlagForgeCTF/flagForge/security/advisories/GHSA-q7pg-qchv-3pc5 · Aviso do Fabricante
• https://twitter.com/NightfallCVE/status/1971206336416550945 · Publicação no Twitter
• https://t.me/CVEtracker/33206 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1970664740515967283 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-59826 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1970621783381540908 · Publicação no Twitter
• https://t.me/cveNotify/137841 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-59826 · Nota de Segurança
• https://t.me/cveNotify/136206 · Publicação no Telegram