Flaskbb vulnerabilities
We track 2 vulnerabilities in Flaskbb products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 10, 2026.
2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score
Latest Flaskbb vulnerabilities
- 7.2 High severity
flaskbb: Incorrect Comparison
FlaskBB through 2.2.0, fixed in commit a5da9a5, contains a logic flaw vulnerability that allows authenticated administrators to delete all built-in authorization groups by exploiting a type mismatch in the bulk delete protection check. The bulk AJAX endpoint i
- 8.1 High severity
flaskbb: Incorrect Authorization
FlaskBB through 2.2.0, fixed in commit acc88cf, contains an authorization bypass vulnerability that allows authenticated moderators to perform unauthorized actions on topics in forums they do not control by submitting crafted topic ID lists. Attackers can incl