CVE-2025-28104
Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.
Original description
The description as published by the source.
Incorrect access control in laskBlog v2.6.1 allows attackers to access all usernames via a crafted input.
References
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web gist.github.com