Vulnerability Database

319,703

Total vulnerabilities in the database

CVE-2025-59932

Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper authentication or authorization. This could have enabled unauthorized users to create, modify, or delete resources on the platform. The issue has been fixed in FlagForge version 2.3.1.

  • Published: Sep 27, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-59932
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.6
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

CWEs:

OWASP TOP 10:

Software From Fixed in
flagforge / flagforge 2.0 2.3.1