The-Scratch-Channel vulnerabilities
We track 2 vulnerabilities in The-Scratch-Channel products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2025.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest The-Scratch-Channel vulnerabilities
- 7.2 High severity
tsc-web-client: Missing Authorization
The Scratch Channel is a news website. If the user makes a fork, they can change the admins and make an article. Since the API uses a POST request, it will make an article. This issue is fixed in v1.2.
- 8.7 High severity
The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint…
The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2.