CVE-2025-28101: Dogukanurker Flaskblog

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An arbitrary file deletion vulnerability in the /post/{postTitle} component of flaskBlog v2.6.1 allows attackers to delete article titles created by other users via supplying a crafted POST request.

Affected products

• Dogukanurker Flaskblog: version 2.6.1 only

Published 2025-04-17. Last modified 2026-06-17.