5.4
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, с обикновен потребителски вход и без действие от потребителя.
Описание
Оригинално описание
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victims' images and stored files or change their star status.
Засегнати продукти
- blossom-editor Blossom: до 1.17.1
Вид слабост
История
- 30 октомври 2026 Публикувано
Други уязвимости в blossom-editor Blossom
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-119644
- https://nvd.nist.gov/vuln/detail/CVE-2026-119644
- https://github.com/blossom-editor/blossom/issues/214
- https://github.com/blossom-editor/blossom/blob/v1.17.1/blossom-backend/backend/src/main/java/com/blossom/backend/server/picture/PictureService.java#L222-L232
- https://github.com/blossom-editor/blossom/blob/v1.17.1/blossom-backend/backend/src/main/java/com/blossom/backend/server/picture/PictureController.java#L56-L109
- https://hackmd.io/@hieuPenguinnn/blossom-picture-idor-cross-user-delete
- https://github.com/blossom-editor/blossom
- https://www.vulncheck.com/advisories/blossom-through-1.17.1-authorization-bypass-via-picture-delete-and-star-endpoints