Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victims' images and stored files or change their star status.

Etkilenen sürümler1 yazılım

Kaynaklar8 kaynak

• CVE.org kaydı
• NVD kaydı
• github.com/blossom-editor/blossom/issues/214 Üçüncü taraf
• hackmd.io/…nguinnn/blossom-picture-idor-cross-user-delete Üçüncü taraf
• vulncheck.com/…n-bypass-via-picture-delete-and-star-endpoints Üçüncü taraf
• github.com/…som/backend/server/picture/PictureService.java Diğer
• github.com/…/backend/server/picture/PictureController.java Diğer
• github.com/blossom-editor/blossom Diğer

Kayıt geçmişi

1. 30 Eki 2026 17:16Yayımlandı

İlgili açıklar

• 5,4 CVE-2026-119659Blossom through 1.17.1 Authorization Bypass via Folder Endpoints
• 6,5 CVE-2026-55551ZAC: Missing per-zaaktype authorization on by-ID decision and process reads
• 6,5 CVE-2026-119708abp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name
• 8,5 CVE-2026-61708SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)
• 4,3 CVE-2026-119664Tamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update
• 4,3 CVE-2026-119663Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create