Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-59416

The Scratch Channel forks can publish articles

Description

The Scratch Channel is a news website. If the user makes a fork, they can change the admins and make an article. Since the API uses a POST request, it will make an article. This issue is fixed in v1.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The-Scratch-Channel tsc-web-client

  • < 1.2affected

References