CVE-2025-59826
BaseFortify
Publication date: 2025-09-23
Last updated on: 2025-10-08
Assigner: GitHub, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| flagforge | flagforge | 2.1.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
In Flag Forge version 2.1.0, non-admin users were able to create arbitrary challenges on the platform. This means they could introduce malicious, incorrect, or misleading content. This vulnerability was fixed in version 2.2.0.
How can this vulnerability impact me? :
This vulnerability can impact you by allowing non-admin users to add harmful or misleading challenges to the platform, which could compromise the integrity and trustworthiness of the content. It may also lead to misinformation or potential security risks for users interacting with those challenges.
What immediate steps should I take to mitigate this vulnerability?
Upgrade Flag Forge to version 2.2.0 or later, as this version contains the patch that fixes the vulnerability allowing non-admin users to create arbitrary challenges.