CVE-2025-59932 — FlagForgeCTF Unauthenticated Resource Modification/Deletion
Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper auth…
Published: 2025-09-27 · CVSS: 8.6 · CVSS 3.1
Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper authentication or authorization. This could have enabled unauthorized users to create, modify, or delete resources on the platform. The issue has been fixed in FlagForge version 2.3.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7