CVE-2025-57805
The Scratch Channel's Publish Articles POST Request Can Upload Articles Without Validation
概要
The Scratch Channel's Publish Articles POST Request Can Upload Articles Without Validation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov