CVE-2025-61777

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-61777
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61777.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-61777
Aliases
  • GHSA-26rx-c53q-rjf9
Published
2025-10-06T16:44:27.713Z
Modified
2026-04-02T12:57:27.689373Z
Severity
  • 9.4 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L CVSS Calculator
Summary
FlagForge Allows Unauthenticated Badge Template API Access
Details

Flag Forge is a Capture The Flag (CTF) platform. Starting in version 2.0.0 and prior to version 2.3.2, the /api/admin/badge-templates (GET) and /api/admin/badge-templates/create (POST) endpoints previously allowed access without authentication or authorization. This could have enabled unauthorized users to retrieve all badge templates and sensitive metadata (createdBy, createdAt, updatedAt) and/or create arbitrary badge templates in the database. This could lead to data exposure, database pollution, or abuse of the badge system. The issue has been fixed in FlagForge v2.3.2. GET, POST, UPDATE, and DELETE endpoints now require authentication. Authorization checks ensure only admins can access and modify badge templates. No reliable workarounds are available.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-200",
        "CWE-284",
        "CWE-306"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61777.json"
}
References

Affected packages

Git / github.com/flagforgectf/flagforge

Affected ranges

Type
GIT
Repo
https://github.com/flagforgectf/flagforge
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e2121c5fb7a512a49dcd875812c944265fb1a846

Affected versions

Other
ctf
v2
v2.*
v2.2
v2.3
v2.3.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-61777.json"