CVE-2025-61777CRITICAL 9.1EPSS p34.5%

CVE-2025-61777CVE-2025-61777

Description

Flag Forge is a Capture The Flag (CTF) platform. Starting in version 2.0.0 and prior to version 2.3.2, the `/api/admin/badge-templates` (GET) and `/api/admin/badge-templates/create` (POST) endpoints previously allowed access without authentication or authorization. This could have enabled unauthorized users to retrieve all badge templates and sensitive metadata (createdBy, createdAt, updatedAt) and/or create arbitrary badge templates in the database. This could lead to data exposure, database pollution, or abuse of the badge system. The issue has been fixed in FlagForge v2.3.2. GET, POST, UPDATE, and DELETE endpoints now require authentication. Authorization checks ensure only admins can access and modify badge templates. No reliable workarounds are available.

Scoring

CVSS 3.19.1 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS0.43% probability of exploitation · percentile 34.5% · 2026-06-19T12:03:05Z
Published2025-10-06
Last modified2025-10-30

Underlying weaknesses· 3

CWE-200CWE-284CWE-306

References

  1. https://github.com/FlagForgeCTF/flagForge/commit/e2121c5fb7a512a49dcd875812c944265fb1a846
  2. https://github.com/FlagForgeCTF/flagForge/security/advisories/GHSA-26rx-c53q-rjf9

3

TypeTargetConfidenceTier
WeaknessExposure of Sensitive Information to an Unauthorized Actorcwe-2000%live
WeaknessImproper Access Controlcwe-2840%live
WeaknessMissing Authentication for Critical Functioncwe-3060%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-59827
CVE
CVE-2025-59932
CVE
CVE-2025-59841
CVE
CVE-2025-67856
CVE
CVE-2025-25106
CVE
CVE-2025-26961
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.