5.4
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, с обикновен потребителски вход и без действие от потребителя.
Описание
Оригинално описание
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other users' folders because FolderService queries filter only on folder id. Attackers can supply another user's folder id to /folder/info, /folder/upd, /folder/open or /folder/del to read storage paths, rename, toggle visibility, or delete folders.
Засегнати продукти
- blossom-editor Blossom: до 1.17.1
Вид слабост
История
- 30 октомври 2026 Публикувано
Други уязвимости в blossom-editor Blossom
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-119659
- https://nvd.nist.gov/vuln/detail/CVE-2026-119659
- https://github.com/blossom-editor/blossom/issues/213
- https://github.com/blossom-editor/blossom/blob/v1.17.1/blossom-backend/backend/src/main/java/com/blossom/backend/server/folder/FolderService.java#L123-L202
- https://github.com/blossom-editor/blossom/blob/v1.17.1/blossom-backend/backend/src/main/resources/mapper/FolderMapper.xml#L64-L92
- https://hackmd.io/@hieuPenguinnn/blossom-folder-idor-cross-user-modify-delete
- https://github.com/blossom-editor/blossom
- https://www.vulncheck.com/advisories/blossom-through-1.17.1-authorization-bypass-via-folder-endpoints