CVE-2025-59932
Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper authentication or authorization. This could have enabled unauthorized users to create, modify, or delete resources on the platform. The issue has been fixed in FlagForge version 2.3.1.
Vendor
Product
CWE
Yayın Tarihi
2025-09-27 01:15:43
Güncelleme
2025-10-08 16:56:50
Source Identifier
security-advisories@github.com
KEV Date Added
-